@hot-updater/server 1.1.3 → 1.2.0-rc.0

package/dist/core/api.cjs

@@ -1,4 +1,5 @@
 const require_reads = require("./reads.cjs");
+const require_nativeBuilds = require("./nativeBuilds.cjs");
 const require_operations = require("./operations.cjs");
 //#region src/core/api.ts
 /**
@@ -41,6 +42,7 @@ const createCoreApi = (db, storage, options = {}) => {
 	return {
 		...reads,
 		...require_operations.createCoreOperations(purgingCachedRoutes(db, options.onCachedRoutesChange), options),
+		...require_nativeBuilds.createNativeBuildApi(db, options),
 		/** One read, which checks the schema settings first. */
 		ready: async () => {
 			await reads.listReleaseCatalogs({ limit: 1 });

package/dist/core/api.d.cts

@@ -9,6 +9,19 @@ interface CoreApiOptions {
 declare const createCoreApi: (db: CoreDatabase, storage: CoreStorage, options?: CoreApiOptions) => {
   /** One read, which checks the schema settings first. */
   ready: () => Promise<void>;
+  registerNativeBuild: (registration: import("@hot-updater/plugin-core").NativeBuildRegistration) => Promise<import("@hot-updater/plugin-core").NativeBuildRow>;
+  getNativeBuild: (id: string) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
+  findNativeBuild: (scope: import("@hot-updater/plugin-core").NativeBuildScope, options?: {
+    readonly buildKey?: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
+  listNativeBuilds: (input: import("@hot-updater/plugin-core").KeysetInput & {
+    readonly channelId?: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow[]>;
+  deleteNativeBuild: (id: string) => Promise<import("@hot-updater/plugin-core").NativeBuildDeleteResult>;
+  recordNativeBuildSubmission: (id: string, submission: {
+    readonly destination: import("@hot-updater/plugin-core").NativeBuildSubmissionDestination;
+    readonly version: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
   deploy: (deployments: readonly import("@hot-updater/plugin-core").Deployment[]) => Promise<import("@hot-updater/plugin-core").ReleaseCatalogMutationResult[]>;
   updateReleasePolicy: (input: import("@hot-updater/plugin-core").ReleaseTarget & {
     readonly patch: import("@hot-updater/plugin-core").ReleasePolicyPatch;

package/dist/core/api.d.mts

@@ -9,6 +9,19 @@ interface CoreApiOptions {
 declare const createCoreApi: (db: CoreDatabase, storage: CoreStorage, options?: CoreApiOptions) => {
   /** One read, which checks the schema settings first. */
   ready: () => Promise<void>;
+  registerNativeBuild: (registration: import("@hot-updater/plugin-core").NativeBuildRegistration) => Promise<import("@hot-updater/plugin-core").NativeBuildRow>;
+  getNativeBuild: (id: string) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
+  findNativeBuild: (scope: import("@hot-updater/plugin-core").NativeBuildScope, options?: {
+    readonly buildKey?: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
+  listNativeBuilds: (input: import("@hot-updater/plugin-core").KeysetInput & {
+    readonly channelId?: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow[]>;
+  deleteNativeBuild: (id: string) => Promise<import("@hot-updater/plugin-core").NativeBuildDeleteResult>;
+  recordNativeBuildSubmission: (id: string, submission: {
+    readonly destination: import("@hot-updater/plugin-core").NativeBuildSubmissionDestination;
+    readonly version: string;
+  }) => Promise<import("@hot-updater/plugin-core").NativeBuildRow | null>;
   deploy: (deployments: readonly import("@hot-updater/plugin-core").Deployment[]) => Promise<import("@hot-updater/plugin-core").ReleaseCatalogMutationResult[]>;
   updateReleasePolicy: (input: import("@hot-updater/plugin-core").ReleaseTarget & {
     readonly patch: import("@hot-updater/plugin-core").ReleasePolicyPatch;

package/dist/core/api.mjs

@@ -1,4 +1,5 @@
 import { createCoreReads } from "./reads.mjs";
+import { createNativeBuildApi } from "./nativeBuilds.mjs";
 import { createCoreOperations } from "./operations.mjs";
 //#region src/core/api.ts
 /**
@@ -41,6 +42,7 @@ const createCoreApi = (db, storage, options = {}) => {
 	return {
 		...reads,
 		...createCoreOperations(purgingCachedRoutes(db, options.onCachedRoutesChange), options),
+		...createNativeBuildApi(db, options),
 		/** One read, which checks the schema settings first. */
 		ready: async () => {
 			await reads.listReleaseCatalogs({ limit: 1 });

package/dist/core/nativeBuilds.cjs

@@ -0,0 +1,232 @@
+const require_reads = require("./reads.cjs");
+const require_writes = require("./writes.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
+let _hot_updater_protocol = require("@hot-updater/protocol");
+//#region src/core/nativeBuilds.ts
+/** The artifacts each platform's build produces. */
+const ARTIFACT_KINDS = {
+	android: ["apk", "aab"],
+	ios: ["ipa", "app"]
+};
+/** `native_builds.scope_key`'s bound in core's schema. */
+const SCOPE_KEY_MAX_LENGTH = 2048;
+/** The `git_commit_hash` bound of `bundles` and `native_builds`. */
+const GIT_COMMIT_HASH_MAX_LENGTH = 255;
+/**
+* A native build key: `nbk1:` and a SHA-256, as the CLI computes it. The
+* format is the CLI's convention, implemented here so the registry stores
+* and looks up nothing else.
+*/
+const BUILD_KEY = /^nbk1:[0-9a-f]{64}$/;
+/** A native build or scope core cannot store or look up: the caller's input. */
+var NativeBuildInputError = class extends TypeError {
+	name = "NativeBuildInputError";
+};
+const pick = (row) => ({
+	id: row.id,
+	scope_key: row.scope_key,
+	platform: row.platform,
+	channel_id: row.channel_id,
+	fingerprint_hash: row.fingerprint_hash ?? null,
+	app_version: row.app_version ?? null,
+	min_bundle_id: row.min_bundle_id,
+	artifact_kind: row.artifact_kind,
+	artifact_storage_uri: row.artifact_storage_uri,
+	byte_size: row.byte_size,
+	git_commit_hash: row.git_commit_hash ?? null,
+	created_at_ms: row.created_at_ms,
+	build_key: row.build_key ?? null,
+	build_number: row.build_number ?? null,
+	submitted_to: row.submitted_to ?? null,
+	submitted_at_ms: row.submitted_at_ms ?? null,
+	submitted_version: row.submitted_version ?? null
+});
+/** The store track each platform's builds are submitted to. */
+const SUBMISSION_DESTINATIONS = {
+	android: "play-internal",
+	ios: "testflight"
+};
+/** `native_builds.build_number`'s bound in core's schema. */
+const BUILD_NUMBER_MAX_LENGTH = 64;
+/** `native_builds.submitted_version`'s bound in core's schema. */
+const SUBMITTED_VERSION_MAX_LENGTH = 255;
+/**
+* A native build scope's key: the Release Catalog scope key of a
+* fingerprint, or of the app-version strategy followed by the exact app
+* version the build compiled in. One key serves both strategies, so one
+* index finds the newest build of either.
+*/
+const nativeBuildScopeKey = (scope) => {
+	let scopeKey;
+	try {
+		const channelKey = (0, _hot_updater_protocol.encodeChannelKey)(scope.channel);
+		scopeKey = scope.fingerprintHash === null ? `${(0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
+			channelKey,
+			platform: scope.platform,
+			strategy: "APP_VERSION"
+		})}:${encodeURIComponent(scope.appVersion)}` : (0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
+			channelKey,
+			fingerprintHash: scope.fingerprintHash,
+			platform: scope.platform,
+			strategy: "FINGERPRINT"
+		});
+	} catch (error) {
+		throw new NativeBuildInputError(`Invalid native build scope: ${error instanceof Error ? error.message : String(error)}.`);
+	}
+	if (scopeKey.length > SCOPE_KEY_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build scope: its key is longer than ${SCOPE_KEY_MAX_LENGTH} characters; shorten the channel or app version.`);
+	return scopeKey;
+};
+/** Whether `bundleId` is a native build's built-in bundle: one unique read. */
+const isBuiltInBundle = async (db, bundleId) => await db.findOne("native_builds", { min_bundle_id: bundleId }) !== null;
+const problemOf = ({ id, minBundleId, platform, channel, fingerprintHash, appVersion, gitCommitHash, buildKey, buildNumber, artifact }) => {
+	if (!(0, _hot_updater_plugin_core.isUUIDv7)(id)) return "id must be a UUIDv7";
+	if (!(0, _hot_updater_plugin_core.isUUIDv7)(minBundleId)) return "minBundleId must be the UUIDv7 a release build compiles in";
+	if (platform !== "ios" && platform !== "android") return "platform must be ios or android";
+	if (channel.trim().length === 0) return "channel is required";
+	if (gitCommitHash !== null && gitCommitHash.length > GIT_COMMIT_HASH_MAX_LENGTH) return `gitCommitHash must be at most ${GIT_COMMIT_HASH_MAX_LENGTH} characters`;
+	if (fingerprintHash === null === (appVersion === null)) return "exactly one of fingerprintHash and appVersion is required";
+	if (buildKey !== null && !BUILD_KEY.test(buildKey)) return "buildKey must be nbk1: and a SHA-256, or null";
+	if (buildNumber !== void 0 && buildNumber !== null && (buildNumber.trim().length === 0 || buildNumber.length > BUILD_NUMBER_MAX_LENGTH)) return `buildNumber must be the artifact's build number, up to ${BUILD_NUMBER_MAX_LENGTH} characters, or null`;
+	const kinds = ARTIFACT_KINDS[platform];
+	if (!kinds.includes(artifact.kind)) return `artifact.kind of an ${platform} build must be ${kinds.join(" or ")}`;
+	if (!Number.isSafeInteger(artifact.byteSize) || artifact.byteSize < 0) return "artifact.byteSize must be a byte count";
+	return null;
+};
+/** The native build registry: core's `native_builds` and the built-in bundle rows. */
+const createNativeBuildApi = (db, { now = Date.now } = {}) => ({
+	async registerNativeBuild(registration) {
+		const problem = problemOf(registration);
+		if (problem !== null) throw new NativeBuildInputError(`Invalid native build: ${problem}.`);
+		const scopeKey = nativeBuildScopeKey(registration);
+		const channelId = `channel:${(0, _hot_updater_protocol.encodeChannelKey)(registration.channel)}`;
+		const { embeddedBundle } = registration;
+		const row = {
+			id: registration.id,
+			scope_key: scopeKey,
+			platform: registration.platform,
+			channel_id: channelId,
+			fingerprint_hash: registration.fingerprintHash,
+			app_version: registration.appVersion,
+			min_bundle_id: registration.minBundleId,
+			artifact_kind: registration.artifact.kind,
+			artifact_storage_uri: registration.artifact.storageUri,
+			byte_size: registration.artifact.byteSize,
+			git_commit_hash: registration.gitCommitHash,
+			created_at_ms: now(),
+			build_key: registration.buildKey,
+			build_number: registration.buildNumber ?? null,
+			submitted_to: null,
+			submitted_at_ms: null,
+			submitted_version: null
+		};
+		for (let attempt = 1;; attempt += 1) {
+			await require_writes.insertChannel(db, {
+				id: channelId,
+				name: registration.channel
+			});
+			try {
+				await db.transaction(async (tx) => {
+					tx.create("bundles", {
+						id: registration.minBundleId,
+						platform: registration.platform,
+						git_commit_hash: registration.gitCommitHash,
+						metadata: embeddedBundle.metadata ?? {},
+						manifest_storage_uri: embeddedBundle.manifestStorageUri,
+						manifest_file_hash: embeddedBundle.manifestFileHash,
+						asset_base_storage_uri: embeddedBundle.assetBaseStorageUri
+					});
+					tx.create("native_builds", row);
+				});
+				break;
+			} catch (error) {
+				if (!(error instanceof _hot_updater_plugin_core.DatabaseConstraintError)) throw error;
+				if (error.reason === "exists" || error.reason === "unique") throw new _hot_updater_plugin_core.DatabaseConstraintError(error.reason, "native_builds");
+				if (attempt < 3 && error.reason === "not_found" && error.model === "channels") continue;
+				throw error;
+			}
+		}
+		return row;
+	},
+	async getNativeBuild(id) {
+		const row = await db.findOne("native_builds", { id });
+		return row === null ? null : pick(row);
+	},
+	async findNativeBuild(scope, options) {
+		const scopeKey = nativeBuildScopeKey(scope);
+		const buildKey = options?.buildKey;
+		if (buildKey !== void 0 && !BUILD_KEY.test(buildKey)) throw new NativeBuildInputError("Invalid native build key: it must be nbk1: and a SHA-256.");
+		const { rows } = buildKey === void 0 ? await db.findMany("native_builds", {
+			index: "byScope",
+			where: { scope_key: scopeKey },
+			order: "desc",
+			limit: 1
+		}) : await db.findMany("native_builds", {
+			index: "byBuildKey",
+			where: {
+				scope_key: scopeKey,
+				build_key: buildKey
+			},
+			order: "desc",
+			limit: 1
+		});
+		return rows[0] === void 0 ? null : pick(rows[0]);
+	},
+	async recordNativeBuildSubmission(id, { destination, version }) {
+		if (version.trim().length === 0 || version.length > SUBMITTED_VERSION_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build submission: version must be the store's label of the build, up to ${SUBMITTED_VERSION_MAX_LENGTH} characters.`);
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return null;
+			const build = pick(row);
+			if (SUBMISSION_DESTINATIONS[build.platform] !== destination) throw new NativeBuildInputError(`Invalid native build submission: an ${build.platform} build is submitted to ${SUBMISSION_DESTINATIONS[build.platform]}, not ${destination}.`);
+			const set = {
+				submitted_to: destination,
+				submitted_at_ms: now(),
+				submitted_version: version
+			};
+			tx.update("native_builds", row, set);
+			return {
+				...build,
+				...set
+			};
+		});
+	},
+	async deleteNativeBuild(id) {
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return {
+				deleted: false,
+				reason: "not_found"
+			};
+			await tx.delete("native_builds", row);
+			const bundle = await tx.findOne("bundles", { id: row.min_bundle_id });
+			if (bundle !== null) await tx.delete("bundles", bundle);
+			return {
+				deleted: true,
+				nativeBuild: pick(row)
+			};
+		});
+	},
+	async listNativeBuilds(input) {
+		const page = {
+			order: input.order ?? "asc",
+			limit: input.limit
+		};
+		const { rows } = input.channelId === void 0 ? await db.findMany("native_builds", {
+			index: "all",
+			where: {},
+			...page,
+			...require_reads.after(input)
+		}) : await db.findMany("native_builds", {
+			index: "byChannel",
+			where: { channel_id: input.channelId },
+			...page,
+			...require_reads.after(input)
+		});
+		return rows.map(pick);
+	}
+});
+//#endregion
+exports.NativeBuildInputError = NativeBuildInputError;
+exports.createNativeBuildApi = createNativeBuildApi;
+exports.isBuiltInBundle = isBuiltInBundle;
+exports.nativeBuildScopeKey = nativeBuildScopeKey;

package/dist/core/nativeBuilds.mjs

@@ -0,0 +1,229 @@
+import { after } from "./reads.mjs";
+import { insertChannel } from "./writes.mjs";
+import { DatabaseConstraintError, isUUIDv7 } from "@hot-updater/plugin-core";
+import { createReleaseCatalogScopeKey, encodeChannelKey } from "@hot-updater/protocol";
+//#region src/core/nativeBuilds.ts
+/** The artifacts each platform's build produces. */
+const ARTIFACT_KINDS = {
+	android: ["apk", "aab"],
+	ios: ["ipa", "app"]
+};
+/** `native_builds.scope_key`'s bound in core's schema. */
+const SCOPE_KEY_MAX_LENGTH = 2048;
+/** The `git_commit_hash` bound of `bundles` and `native_builds`. */
+const GIT_COMMIT_HASH_MAX_LENGTH = 255;
+/**
+* A native build key: `nbk1:` and a SHA-256, as the CLI computes it. The
+* format is the CLI's convention, implemented here so the registry stores
+* and looks up nothing else.
+*/
+const BUILD_KEY = /^nbk1:[0-9a-f]{64}$/;
+/** A native build or scope core cannot store or look up: the caller's input. */
+var NativeBuildInputError = class extends TypeError {
+	name = "NativeBuildInputError";
+};
+const pick = (row) => ({
+	id: row.id,
+	scope_key: row.scope_key,
+	platform: row.platform,
+	channel_id: row.channel_id,
+	fingerprint_hash: row.fingerprint_hash ?? null,
+	app_version: row.app_version ?? null,
+	min_bundle_id: row.min_bundle_id,
+	artifact_kind: row.artifact_kind,
+	artifact_storage_uri: row.artifact_storage_uri,
+	byte_size: row.byte_size,
+	git_commit_hash: row.git_commit_hash ?? null,
+	created_at_ms: row.created_at_ms,
+	build_key: row.build_key ?? null,
+	build_number: row.build_number ?? null,
+	submitted_to: row.submitted_to ?? null,
+	submitted_at_ms: row.submitted_at_ms ?? null,
+	submitted_version: row.submitted_version ?? null
+});
+/** The store track each platform's builds are submitted to. */
+const SUBMISSION_DESTINATIONS = {
+	android: "play-internal",
+	ios: "testflight"
+};
+/** `native_builds.build_number`'s bound in core's schema. */
+const BUILD_NUMBER_MAX_LENGTH = 64;
+/** `native_builds.submitted_version`'s bound in core's schema. */
+const SUBMITTED_VERSION_MAX_LENGTH = 255;
+/**
+* A native build scope's key: the Release Catalog scope key of a
+* fingerprint, or of the app-version strategy followed by the exact app
+* version the build compiled in. One key serves both strategies, so one
+* index finds the newest build of either.
+*/
+const nativeBuildScopeKey = (scope) => {
+	let scopeKey;
+	try {
+		const channelKey = encodeChannelKey(scope.channel);
+		scopeKey = scope.fingerprintHash === null ? `${createReleaseCatalogScopeKey({
+			channelKey,
+			platform: scope.platform,
+			strategy: "APP_VERSION"
+		})}:${encodeURIComponent(scope.appVersion)}` : createReleaseCatalogScopeKey({
+			channelKey,
+			fingerprintHash: scope.fingerprintHash,
+			platform: scope.platform,
+			strategy: "FINGERPRINT"
+		});
+	} catch (error) {
+		throw new NativeBuildInputError(`Invalid native build scope: ${error instanceof Error ? error.message : String(error)}.`);
+	}
+	if (scopeKey.length > SCOPE_KEY_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build scope: its key is longer than ${SCOPE_KEY_MAX_LENGTH} characters; shorten the channel or app version.`);
+	return scopeKey;
+};
+/** Whether `bundleId` is a native build's built-in bundle: one unique read. */
+const isBuiltInBundle = async (db, bundleId) => await db.findOne("native_builds", { min_bundle_id: bundleId }) !== null;
+const problemOf = ({ id, minBundleId, platform, channel, fingerprintHash, appVersion, gitCommitHash, buildKey, buildNumber, artifact }) => {
+	if (!isUUIDv7(id)) return "id must be a UUIDv7";
+	if (!isUUIDv7(minBundleId)) return "minBundleId must be the UUIDv7 a release build compiles in";
+	if (platform !== "ios" && platform !== "android") return "platform must be ios or android";
+	if (channel.trim().length === 0) return "channel is required";
+	if (gitCommitHash !== null && gitCommitHash.length > GIT_COMMIT_HASH_MAX_LENGTH) return `gitCommitHash must be at most ${GIT_COMMIT_HASH_MAX_LENGTH} characters`;
+	if (fingerprintHash === null === (appVersion === null)) return "exactly one of fingerprintHash and appVersion is required";
+	if (buildKey !== null && !BUILD_KEY.test(buildKey)) return "buildKey must be nbk1: and a SHA-256, or null";
+	if (buildNumber !== void 0 && buildNumber !== null && (buildNumber.trim().length === 0 || buildNumber.length > BUILD_NUMBER_MAX_LENGTH)) return `buildNumber must be the artifact's build number, up to ${BUILD_NUMBER_MAX_LENGTH} characters, or null`;
+	const kinds = ARTIFACT_KINDS[platform];
+	if (!kinds.includes(artifact.kind)) return `artifact.kind of an ${platform} build must be ${kinds.join(" or ")}`;
+	if (!Number.isSafeInteger(artifact.byteSize) || artifact.byteSize < 0) return "artifact.byteSize must be a byte count";
+	return null;
+};
+/** The native build registry: core's `native_builds` and the built-in bundle rows. */
+const createNativeBuildApi = (db, { now = Date.now } = {}) => ({
+	async registerNativeBuild(registration) {
+		const problem = problemOf(registration);
+		if (problem !== null) throw new NativeBuildInputError(`Invalid native build: ${problem}.`);
+		const scopeKey = nativeBuildScopeKey(registration);
+		const channelId = `channel:${encodeChannelKey(registration.channel)}`;
+		const { embeddedBundle } = registration;
+		const row = {
+			id: registration.id,
+			scope_key: scopeKey,
+			platform: registration.platform,
+			channel_id: channelId,
+			fingerprint_hash: registration.fingerprintHash,
+			app_version: registration.appVersion,
+			min_bundle_id: registration.minBundleId,
+			artifact_kind: registration.artifact.kind,
+			artifact_storage_uri: registration.artifact.storageUri,
+			byte_size: registration.artifact.byteSize,
+			git_commit_hash: registration.gitCommitHash,
+			created_at_ms: now(),
+			build_key: registration.buildKey,
+			build_number: registration.buildNumber ?? null,
+			submitted_to: null,
+			submitted_at_ms: null,
+			submitted_version: null
+		};
+		for (let attempt = 1;; attempt += 1) {
+			await insertChannel(db, {
+				id: channelId,
+				name: registration.channel
+			});
+			try {
+				await db.transaction(async (tx) => {
+					tx.create("bundles", {
+						id: registration.minBundleId,
+						platform: registration.platform,
+						git_commit_hash: registration.gitCommitHash,
+						metadata: embeddedBundle.metadata ?? {},
+						manifest_storage_uri: embeddedBundle.manifestStorageUri,
+						manifest_file_hash: embeddedBundle.manifestFileHash,
+						asset_base_storage_uri: embeddedBundle.assetBaseStorageUri
+					});
+					tx.create("native_builds", row);
+				});
+				break;
+			} catch (error) {
+				if (!(error instanceof DatabaseConstraintError)) throw error;
+				if (error.reason === "exists" || error.reason === "unique") throw new DatabaseConstraintError(error.reason, "native_builds");
+				if (attempt < 3 && error.reason === "not_found" && error.model === "channels") continue;
+				throw error;
+			}
+		}
+		return row;
+	},
+	async getNativeBuild(id) {
+		const row = await db.findOne("native_builds", { id });
+		return row === null ? null : pick(row);
+	},
+	async findNativeBuild(scope, options) {
+		const scopeKey = nativeBuildScopeKey(scope);
+		const buildKey = options?.buildKey;
+		if (buildKey !== void 0 && !BUILD_KEY.test(buildKey)) throw new NativeBuildInputError("Invalid native build key: it must be nbk1: and a SHA-256.");
+		const { rows } = buildKey === void 0 ? await db.findMany("native_builds", {
+			index: "byScope",
+			where: { scope_key: scopeKey },
+			order: "desc",
+			limit: 1
+		}) : await db.findMany("native_builds", {
+			index: "byBuildKey",
+			where: {
+				scope_key: scopeKey,
+				build_key: buildKey
+			},
+			order: "desc",
+			limit: 1
+		});
+		return rows[0] === void 0 ? null : pick(rows[0]);
+	},
+	async recordNativeBuildSubmission(id, { destination, version }) {
+		if (version.trim().length === 0 || version.length > SUBMITTED_VERSION_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build submission: version must be the store's label of the build, up to ${SUBMITTED_VERSION_MAX_LENGTH} characters.`);
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return null;
+			const build = pick(row);
+			if (SUBMISSION_DESTINATIONS[build.platform] !== destination) throw new NativeBuildInputError(`Invalid native build submission: an ${build.platform} build is submitted to ${SUBMISSION_DESTINATIONS[build.platform]}, not ${destination}.`);
+			const set = {
+				submitted_to: destination,
+				submitted_at_ms: now(),
+				submitted_version: version
+			};
+			tx.update("native_builds", row, set);
+			return {
+				...build,
+				...set
+			};
+		});
+	},
+	async deleteNativeBuild(id) {
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return {
+				deleted: false,
+				reason: "not_found"
+			};
+			await tx.delete("native_builds", row);
+			const bundle = await tx.findOne("bundles", { id: row.min_bundle_id });
+			if (bundle !== null) await tx.delete("bundles", bundle);
+			return {
+				deleted: true,
+				nativeBuild: pick(row)
+			};
+		});
+	},
+	async listNativeBuilds(input) {
+		const page = {
+			order: input.order ?? "asc",
+			limit: input.limit
+		};
+		const { rows } = input.channelId === void 0 ? await db.findMany("native_builds", {
+			index: "all",
+			where: {},
+			...page,
+			...after(input)
+		}) : await db.findMany("native_builds", {
+			index: "byChannel",
+			where: { channel_id: input.channelId },
+			...page,
+			...after(input)
+		});
+		return rows.map(pick);
+	}
+});
+//#endregion
+export { NativeBuildInputError, createNativeBuildApi, isBuiltInBundle, nativeBuildScopeKey };

package/dist/core/operations.cjs

@@ -1,5 +1,6 @@
 const require_reads = require("./reads.cjs");
 const require_writes = require("./writes.cjs");
+const require_nativeBuilds = require("./nativeBuilds.cjs");
 const require_releases = require("./releases.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let _hot_updater_protocol = require("@hot-updater/protocol");
@@ -131,6 +132,7 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
 			const row = await db.findOne("bundles", { id: deployment.bundleId });
 			if (row === null) throw new _hot_updater_plugin_core.DatabaseBundleNotFoundError(deployment.bundleId);
+			if (await require_nativeBuilds.isBuiltInBundle(db, deployment.bundleId)) throw new _hot_updater_plugin_core.ReleaseManagementError("TARGET_RELEASE_INVALID", `Bundle "${deployment.bundleId}" is a native build's built-in bundle, which no release publishes.`);
 			platforms.set(deployment.bundleId, require_reads.toBundleRow(row).platform);
 		}
 		const updatedAtMs = now();
@@ -326,7 +328,8 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				id
 			};
 			const { id: _id, ...set } = (0, _hot_updater_plugin_core.bundleToRow)(next);
-			require_writes.updateBundle(tx, current, set);
+			const counted = set.platform === current.platform || !await require_nativeBuilds.isBuiltInBundle(tx, id);
+			require_writes.updateBundle(tx, current, set, { counted });
 			if (patches !== void 0) await require_writes.replaceBundlePatches(tx, current, (0, _hot_updater_plugin_core.bundleToPatchRows)({
 				...next,
 				patches
@@ -337,7 +340,9 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				await db.transaction(async (tx) => {
 					for (const id of new Set(ids)) {
 						const current = await tx.findOne("bundles", { id });
-						if (current !== null) await require_writes.deleteBundle(tx, current);
+						if (current === null) continue;
+						if (await require_nativeBuilds.isBuiltInBundle(tx, id)) throw new _hot_updater_plugin_core.DatabaseRowReferencedError();
+						await require_writes.deleteBundle(tx, current);
 					}
 				});
 			} catch (error) {

package/dist/core/operations.mjs

@@ -1,5 +1,6 @@
 import { toBundleRow, toReleaseRow } from "./reads.mjs";
 import { deleteBundle, deleteChannel, insertChannel, replaceBundlePatches, updateBundle } from "./writes.mjs";
+import { isBuiltInBundle } from "./nativeBuilds.mjs";
 import { changeRelease, changeReleases, readCatalog, rebuildScope } from "./releases.mjs";
 import { DatabaseBundleNotFoundError, DatabaseConstraintError, DatabaseRowReferencedError, ReleaseCatalogMutationError, ReleaseManagementError, bundleToPatchRows, bundleToRow, createUUIDv7After, isUUIDv7, rowToBundle } from "@hot-updater/plugin-core";
 import { createReleaseCatalogScopeKey, decodeChannelKey, encodeChannelKey } from "@hot-updater/protocol";
@@ -131,6 +132,7 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
 			const row = await db.findOne("bundles", { id: deployment.bundleId });
 			if (row === null) throw new DatabaseBundleNotFoundError(deployment.bundleId);
+			if (await isBuiltInBundle(db, deployment.bundleId)) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", `Bundle "${deployment.bundleId}" is a native build's built-in bundle, which no release publishes.`);
 			platforms.set(deployment.bundleId, toBundleRow(row).platform);
 		}
 		const updatedAtMs = now();
@@ -326,7 +328,8 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				id
 			};
 			const { id: _id, ...set } = bundleToRow(next);
-			updateBundle(tx, current, set);
+			const counted = set.platform === current.platform || !await isBuiltInBundle(tx, id);
+			updateBundle(tx, current, set, { counted });
 			if (patches !== void 0) await replaceBundlePatches(tx, current, bundleToPatchRows({
 				...next,
 				patches
@@ -337,7 +340,9 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				await db.transaction(async (tx) => {
 					for (const id of new Set(ids)) {
 						const current = await tx.findOne("bundles", { id });
-						if (current !== null) await deleteBundle(tx, current);
+						if (current === null) continue;
+						if (await isBuiltInBundle(tx, id)) throw new DatabaseRowReferencedError();
+						await deleteBundle(tx, current);
 					}
 				});
 			} catch (error) {

package/dist/core/reads.cjs

@@ -73,6 +73,8 @@ const drain = async (read) => {
 	} while (cursor !== void 0);
 	return rows;
 };
+/** A keyset page's range: the keys strictly after `after`, in `order`. */
+const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 /** Core's reads, each through one declared index or key. */
 const createCoreReads = (db, storage) => {
 	/** A bundle row's patches, exactly as many as its reference counter holds. */
@@ -97,7 +99,6 @@ const createCoreReads = (db, storage) => {
 			childCount: row._refs_bundle_patches_base_bundle_id ?? 0
 		};
 	};
-	const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 	return {
 		/** The update check: one point read of its scope's catalog. */
 		async getReleaseCatalog(input) {
@@ -278,6 +279,7 @@ const createCoreReads = (db, storage) => {
 	};
 };
 //#endregion
+exports.after = after;
 exports.createCoreReads = createCoreReads;
 exports.drain = drain;
 exports.toBundleRow = toBundleRow;

package/dist/core/reads.mjs

@@ -73,6 +73,8 @@ const drain = async (read) => {
 	} while (cursor !== void 0);
 	return rows;
 };
+/** A keyset page's range: the keys strictly after `after`, in `order`. */
+const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 /** Core's reads, each through one declared index or key. */
 const createCoreReads = (db, storage) => {
 	/** A bundle row's patches, exactly as many as its reference counter holds. */
@@ -97,7 +99,6 @@ const createCoreReads = (db, storage) => {
 			childCount: row._refs_bundle_patches_base_bundle_id ?? 0
 		};
 	};
-	const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 	return {
 		/** The update check: one point read of its scope's catalog. */
 		async getReleaseCatalog(input) {
@@ -278,4 +279,4 @@ const createCoreReads = (db, storage) => {
 	};
 };
 //#endregion
-export { createCoreReads, drain, toBundleRow, toCatalogRow, toChannelRow, toPatchRow, toReleaseRow };
+export { after, createCoreReads, drain, toBundleRow, toCatalogRow, toChannelRow, toPatchRow, toReleaseRow };

package/dist/core/writes.cjs

@@ -10,9 +10,13 @@ const insertBundle = (tx, row) => {
 	tx.create("bundles", row);
 	countBundle(tx, row.platform, 1);
 };
-const updateBundle = (tx, current, set) => {
+/**
+* Updates a bundle; a platform change moves it between platform totals,
+* except for a native build's built-in bundle, which they never count.
+*/
+const updateBundle = (tx, current, set, { counted = true } = {}) => {
 	tx.update("bundles", current, set);
-	if (set.platform !== void 0 && set.platform !== current.platform) {
+	if (counted && set.platform !== void 0 && set.platform !== current.platform) {
 		countBundle(tx, current.platform, -1);
 		countBundle(tx, set.platform, 1);
 	}
@@ -73,7 +77,7 @@ const insertChannel = async (db, row) => {
 		throw error;
 	}
 };
-/** Deletes a channel no release uses: 1 read + 1 write. */
+/** Deletes a channel no release or native build uses: 1 read, 1 query, 1 write. */
 const deleteChannel = (db, id) => db.transaction(async (tx) => {
 	const row = await tx.findOne("channels", { id });
 	if (row === null) return {
@@ -84,6 +88,15 @@ const deleteChannel = (db, id) => db.transaction(async (tx) => {
 		deleted: false,
 		reason: "not_empty"
 	};
+	const { rows: builds } = await tx.findMany("native_builds", {
+		index: "byChannel",
+		where: { channel_id: id },
+		limit: 1
+	});
+	if (builds.length > 0) return {
+		deleted: false,
+		reason: "not_empty"
+	};
 	await tx.delete("channels", row);
 	return { deleted: true };
 });

package/dist/core/writes.mjs

@@ -10,9 +10,13 @@ const insertBundle = (tx, row) => {
 	tx.create("bundles", row);
 	countBundle(tx, row.platform, 1);
 };
-const updateBundle = (tx, current, set) => {
+/**
+* Updates a bundle; a platform change moves it between platform totals,
+* except for a native build's built-in bundle, which they never count.
+*/
+const updateBundle = (tx, current, set, { counted = true } = {}) => {
 	tx.update("bundles", current, set);
-	if (set.platform !== void 0 && set.platform !== current.platform) {
+	if (counted && set.platform !== void 0 && set.platform !== current.platform) {
 		countBundle(tx, current.platform, -1);
 		countBundle(tx, set.platform, 1);
 	}
@@ -73,7 +77,7 @@ const insertChannel = async (db, row) => {
 		throw error;
 	}
 };
-/** Deletes a channel no release uses: 1 read + 1 write. */
+/** Deletes a channel no release or native build uses: 1 read, 1 query, 1 write. */
 const deleteChannel = (db, id) => db.transaction(async (tx) => {
 	const row = await tx.findOne("channels", { id });
 	if (row === null) return {
@@ -84,6 +88,15 @@ const deleteChannel = (db, id) => db.transaction(async (tx) => {
 		deleted: false,
 		reason: "not_empty"
 	};
+	const { rows: builds } = await tx.findMany("native_builds", {
+		index: "byChannel",
+		where: { channel_id: id },
+		limit: 1
+	});
+	if (builds.length > 0) return {
+		deleted: false,
+		reason: "not_empty"
+	};
 	await tx.delete("channels", row);
 	return { deleted: true };
 });

package/dist/handlerAdminRoutes.cjs

@@ -1,3 +1,4 @@
+const require_nativeBuilds = require("./core/nativeBuilds.cjs");
 const require_handlerErrors = require("./handlerErrors.cjs");
 const require_handlerParameters = require("./handlerParameters.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
@@ -27,6 +28,10 @@ const answer = async (operation) => {
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
+		if (error instanceof _hot_updater_plugin_core.DatabaseConstraintError && error.model === "native_builds") return json({
+			code: "NATIVE_BUILD_EXISTS",
+			error: "A native build with this ID or built-in bundle ID is already registered."
+		}, 409);
 		throw error;
 	}
 };
@@ -129,6 +134,42 @@ const bundleUpdateOf = (value, bundleId) => {
 	if (id !== void 0 && id !== bundleId) throw new require_handlerErrors.HandlerBadRequestError("Bundle id mismatch");
 	return update;
 };
+const NATIVE_BUILD_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+	"apk",
+	"aab",
+	"ipa",
+	"app"
+]);
+/** A native build's scope: `fingerprintHash` or `appVersion`, never both. */
+const nativeBuildScopeOf = (url) => {
+	const params = url.searchParams;
+	const platform = platformOf(url);
+	const channel = params.get("channel");
+	const fingerprintHash = params.get("fingerprintHash");
+	const appVersion = params.get("appVersion");
+	if (platform === void 0 || !isText(channel) || fingerprintHash === null === (appVersion === null) || fingerprintHash === "" || appVersion === "") throw new require_handlerErrors.HandlerBadRequestError("A native build lookup needs platform, channel, and fingerprintHash or appVersion.");
+	return fingerprintHash !== null ? {
+		platform,
+		channel,
+		fingerprintHash,
+		appVersion: null
+	} : {
+		platform,
+		channel,
+		fingerprintHash: null,
+		appVersion
+	};
+};
+/** A native build or scope core refuses: a bad request. */
+const refusingInvalid = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof require_nativeBuilds.NativeBuildInputError) throw new require_handlerErrors.HandlerBadRequestError(error.message);
+		throw error;
+	}
+};
+const isNativeBuildRegistration = (value) => isRecord(value) && isText(value.id) && isText(value.minBundleId) && typeof value.platform === "string" && require_handlerParameters.isPlatform(value.platform) && isText(value.channel) && isTextOrNull(value.fingerprintHash) && isTextOrNull(value.appVersion) && value.fingerprintHash === null !== (value.appVersion === null) && isTextOrNull(value.gitCommitHash) && isTextOrNull(value.buildKey) && (value.buildNumber === void 0 || isTextOrNull(value.buildNumber)) && isRecord(value.artifact) && typeof value.artifact.kind === "string" && NATIVE_BUILD_ARTIFACT_KINDS.has(value.artifact.kind) && isText(value.artifact.storageUri) && Number.isSafeInteger(value.artifact.byteSize) && value.artifact.byteSize >= 0 && isRecord(value.embeddedBundle) && isText(value.embeddedBundle.manifestStorageUri) && isText(value.embeddedBundle.manifestFileHash) && isText(value.embeddedBundle.assetBaseStorageUri) && (value.embeddedBundle.metadata === void 0 || isRecord(value.embeddedBundle.metadata));
 const scopeKeyOf = (params) => require_handlerParameters.decodeMaybe(require_handlerParameters.requireRouteParam(params, "scopeKey")) ?? "";
 /** Every admin route's handler, by the name `ADMIN_ROUTES` mounts it under. */
 const createAdminRouteHandlers = () => ({
@@ -248,6 +289,37 @@ const createAdminRouteHandlers = () => ({
 		}) });
 	}),
 	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	registerNativeBuild: onCore(async (core, request) => {
+		const input = await body(request);
+		if (!isNativeBuildRegistration(input)) throw new require_handlerErrors.HandlerBadRequestError("Invalid native build");
+		return json({ data: await refusingInvalid(() => core.registerNativeBuild(input)) }, 201);
+	}),
+	findNativeBuild: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const scope = nativeBuildScopeOf(url);
+		const buildKey = url.searchParams.get("buildKey");
+		return json({ data: await refusingInvalid(() => buildKey === null ? core.findNativeBuild(scope) : core.findNativeBuild(scope, { buildKey })) });
+	}),
+	getNativeBuild: onCore(async (core, _request, params) => json({ data: await core.getNativeBuild(require_handlerParameters.requireRouteParam(params, "id")) })),
+	listNativeBuilds: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const input = keyset(url);
+		const channelId = url.searchParams.get("channelId");
+		return page(await core.listNativeBuilds({
+			...input,
+			...channelId === null ? {} : { channelId }
+		}), input, ({ id }) => id);
+	}),
+	recordNativeBuildSubmission: onCore(async (core, request, params) => {
+		const input = await body(request);
+		if (!isRecord(input) || input.destination !== "testflight" && input.destination !== "play-internal" || !isText(input.version)) throw new require_handlerErrors.HandlerBadRequestError("A native build submission needs destination (testflight or play-internal) and version.");
+		const submission = {
+			destination: input.destination,
+			version: input.version
+		};
+		return json({ data: await refusingInvalid(() => core.recordNativeBuildSubmission(require_handlerParameters.requireRouteParam(params, "id"), submission)) });
+	}),
+	deleteNativeBuild: onCore(async (core, _request, params) => json({ data: await core.deleteNativeBuild(require_handlerParameters.requireRouteParam(params, "id")) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new require_handlerErrors.HandlerBadRequestError("Bundle deletion needs ids");
@@ -366,6 +438,36 @@ const ADMIN_ROUTES = [
 		method: "GET",
 		path: "/base-candidates/:candidateKey",
 		handler: "findBaseCandidates"
+	},
+	{
+		method: "POST",
+		path: "/native-builds",
+		handler: "registerNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/latest",
+		handler: "findNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/:id",
+		handler: "getNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds",
+		handler: "listNativeBuilds"
+	},
+	{
+		method: "POST",
+		path: "/native-builds/:id/submission",
+		handler: "recordNativeBuildSubmission"
+	},
+	{
+		method: "DELETE",
+		path: "/native-builds/:id",
+		handler: "deleteNativeBuild"
 	}
 ];
 //#endregion

package/dist/handlerAdminRoutes.mjs

@@ -1,6 +1,7 @@
+import { NativeBuildInputError } from "./core/nativeBuilds.mjs";
 import { HandlerBadRequestError } from "./handlerErrors.mjs";
 import { decodeMaybe, isPlatform, parseBooleanSearchParam, requireRouteParam } from "./handlerParameters.mjs";
-import { DatabaseBundleNotFoundError, DatabaseRowReferencedError, ReleaseCatalogMutationError, ReleaseManagementError } from "@hot-updater/plugin-core";
+import { DatabaseBundleNotFoundError, DatabaseConstraintError, DatabaseRowReferencedError, ReleaseCatalogMutationError, ReleaseManagementError } from "@hot-updater/plugin-core";
 //#region src/handlerAdminRoutes.ts
 const json = (body, status = 200) => Response.json(body, { status });
 const notFound = () => json({ error: "Not found" }, 404);
@@ -27,6 +28,10 @@ const answer = async (operation) => {
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
+		if (error instanceof DatabaseConstraintError && error.model === "native_builds") return json({
+			code: "NATIVE_BUILD_EXISTS",
+			error: "A native build with this ID or built-in bundle ID is already registered."
+		}, 409);
 		throw error;
 	}
 };
@@ -129,6 +134,42 @@ const bundleUpdateOf = (value, bundleId) => {
 	if (id !== void 0 && id !== bundleId) throw new HandlerBadRequestError("Bundle id mismatch");
 	return update;
 };
+const NATIVE_BUILD_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+	"apk",
+	"aab",
+	"ipa",
+	"app"
+]);
+/** A native build's scope: `fingerprintHash` or `appVersion`, never both. */
+const nativeBuildScopeOf = (url) => {
+	const params = url.searchParams;
+	const platform = platformOf(url);
+	const channel = params.get("channel");
+	const fingerprintHash = params.get("fingerprintHash");
+	const appVersion = params.get("appVersion");
+	if (platform === void 0 || !isText(channel) || fingerprintHash === null === (appVersion === null) || fingerprintHash === "" || appVersion === "") throw new HandlerBadRequestError("A native build lookup needs platform, channel, and fingerprintHash or appVersion.");
+	return fingerprintHash !== null ? {
+		platform,
+		channel,
+		fingerprintHash,
+		appVersion: null
+	} : {
+		platform,
+		channel,
+		fingerprintHash: null,
+		appVersion
+	};
+};
+/** A native build or scope core refuses: a bad request. */
+const refusingInvalid = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof NativeBuildInputError) throw new HandlerBadRequestError(error.message);
+		throw error;
+	}
+};
+const isNativeBuildRegistration = (value) => isRecord(value) && isText(value.id) && isText(value.minBundleId) && typeof value.platform === "string" && isPlatform(value.platform) && isText(value.channel) && isTextOrNull(value.fingerprintHash) && isTextOrNull(value.appVersion) && value.fingerprintHash === null !== (value.appVersion === null) && isTextOrNull(value.gitCommitHash) && isTextOrNull(value.buildKey) && (value.buildNumber === void 0 || isTextOrNull(value.buildNumber)) && isRecord(value.artifact) && typeof value.artifact.kind === "string" && NATIVE_BUILD_ARTIFACT_KINDS.has(value.artifact.kind) && isText(value.artifact.storageUri) && Number.isSafeInteger(value.artifact.byteSize) && value.artifact.byteSize >= 0 && isRecord(value.embeddedBundle) && isText(value.embeddedBundle.manifestStorageUri) && isText(value.embeddedBundle.manifestFileHash) && isText(value.embeddedBundle.assetBaseStorageUri) && (value.embeddedBundle.metadata === void 0 || isRecord(value.embeddedBundle.metadata));
 const scopeKeyOf = (params) => decodeMaybe(requireRouteParam(params, "scopeKey")) ?? "";
 /** Every admin route's handler, by the name `ADMIN_ROUTES` mounts it under. */
 const createAdminRouteHandlers = () => ({
@@ -248,6 +289,37 @@ const createAdminRouteHandlers = () => ({
 		}) });
 	}),
 	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	registerNativeBuild: onCore(async (core, request) => {
+		const input = await body(request);
+		if (!isNativeBuildRegistration(input)) throw new HandlerBadRequestError("Invalid native build");
+		return json({ data: await refusingInvalid(() => core.registerNativeBuild(input)) }, 201);
+	}),
+	findNativeBuild: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const scope = nativeBuildScopeOf(url);
+		const buildKey = url.searchParams.get("buildKey");
+		return json({ data: await refusingInvalid(() => buildKey === null ? core.findNativeBuild(scope) : core.findNativeBuild(scope, { buildKey })) });
+	}),
+	getNativeBuild: onCore(async (core, _request, params) => json({ data: await core.getNativeBuild(requireRouteParam(params, "id")) })),
+	listNativeBuilds: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const input = keyset(url);
+		const channelId = url.searchParams.get("channelId");
+		return page(await core.listNativeBuilds({
+			...input,
+			...channelId === null ? {} : { channelId }
+		}), input, ({ id }) => id);
+	}),
+	recordNativeBuildSubmission: onCore(async (core, request, params) => {
+		const input = await body(request);
+		if (!isRecord(input) || input.destination !== "testflight" && input.destination !== "play-internal" || !isText(input.version)) throw new HandlerBadRequestError("A native build submission needs destination (testflight or play-internal) and version.");
+		const submission = {
+			destination: input.destination,
+			version: input.version
+		};
+		return json({ data: await refusingInvalid(() => core.recordNativeBuildSubmission(requireRouteParam(params, "id"), submission)) });
+	}),
+	deleteNativeBuild: onCore(async (core, _request, params) => json({ data: await core.deleteNativeBuild(requireRouteParam(params, "id")) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new HandlerBadRequestError("Bundle deletion needs ids");
@@ -366,6 +438,36 @@ const ADMIN_ROUTES = [
 		method: "GET",
 		path: "/base-candidates/:candidateKey",
 		handler: "findBaseCandidates"
+	},
+	{
+		method: "POST",
+		path: "/native-builds",
+		handler: "registerNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/latest",
+		handler: "findNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/:id",
+		handler: "getNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds",
+		handler: "listNativeBuilds"
+	},
+	{
+		method: "POST",
+		path: "/native-builds/:id/submission",
+		handler: "recordNativeBuildSubmission"
+	},
+	{
+		method: "DELETE",
+		path: "/native-builds/:id",
+		handler: "deleteNativeBuild"
 	}
 ];
 //#endregion

package/dist/package.cjs

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "1.1.3";
+var version = "1.2.0-rc.0";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/package.mjs

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "1.1.3";
+var version = "1.2.0-rc.0";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/server",
-  "version": "1.1.3",
+  "version": "1.2.0-rc.0",
   "type": "module",
   "description": "React Native OTA solution for self-hosted",
   "sideEffects": false,
@@ -50,11 +50,11 @@
   "dependencies": {
     "rou3": "0.7.9",
     "verkit": "0.4.0",
-    "@hot-updater/protocol": "1.1.3",
-    "@hot-updater/plugin-core": "1.1.3",
-    "@hot-updater/plugin-api-keys": "1.1.3",
-    "@hot-updater/plugin-insights": "1.1.3",
-    "@hot-updater/plugin-remote-config": "1.1.3"
+    "@hot-updater/protocol": "1.2.0-rc.0",
+    "@hot-updater/plugin-core": "1.2.0-rc.0",
+    "@hot-updater/plugin-api-keys": "1.2.0-rc.0",
+    "@hot-updater/plugin-insights": "1.2.0-rc.0",
+    "@hot-updater/plugin-remote-config": "1.2.0-rc.0"
   },
   "peerDependencies": {
     "@prisma/client": "*",
@@ -95,8 +95,8 @@
     "prisma": "6.19.3",
     "uuidv7": "^1.0.2",
     "wrangler": "^4.69.0",
-    "@hot-updater/test-utils": "1.1.3",
-    "@hot-updater/standalone": "1.1.3"
+    "@hot-updater/standalone": "1.2.0-rc.0",
+    "@hot-updater/test-utils": "1.2.0-rc.0"
   },
   "nx": {
     "implicitDependencies": [