@hot-updater/supabase 1.0.0-rc.40 → 1.0.0-rc.42

package/dist/edge.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_plugins = require("./plugins-jpIkI_T2.cjs");
+const require_plugins = require("./plugins-C3qJSy3_.cjs");
 //#region src/supabaseEdgeFunctionStorage.ts
 const supabaseEdgeFunctionStorage = (config) => require_plugins.supabaseStorage(config);
 //#endregion

package/dist/edge.d.cts

@@ -1,4 +1,4 @@
-import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DPvSBD18.cjs";
+import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DV5XdQWp.cjs";
 import { StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseEdgeFunctionStorage.d.ts
 interface SupabaseEdgeFunctionStorageConfig {

package/dist/edge.d.mts

@@ -1,4 +1,4 @@
-import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DPvSBD18.mjs";
+import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DV5XdQWp.mjs";
 import { StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseEdgeFunctionStorage.d.ts
 interface SupabaseEdgeFunctionStorageConfig {

package/dist/edge.mjs

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as supabaseDatabase, t as plugins } from "./plugins-Dj-4Pk3j.mjs";
+import { n as supabaseStorage, r as supabaseDatabase, t as plugins } from "./plugins-Do0arFjS.mjs";
 //#region src/supabaseEdgeFunctionStorage.ts
 const supabaseEdgeFunctionStorage = (config) => supabaseStorage(config);
 //#endregion

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_plugins = require("./plugins-jpIkI_T2.cjs");
+const require_plugins = require("./plugins-C3qJSy3_.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DPvSBD18.cjs";
+import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DV5XdQWp.cjs";
 import { StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DPvSBD18.mjs";
+import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-DV5XdQWp.mjs";
 import { StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as SUPABASE_TABLE_PREFIX, i as SUPABASE_APPLY_FUNCTION, n as supabaseStorage, r as supabaseDatabase$1, t as plugins } from "./plugins-Dj-4Pk3j.mjs";
+import { a as SUPABASE_TABLE_PREFIX, i as SUPABASE_APPLY_FUNCTION, n as supabaseStorage, r as supabaseDatabase$1, t as plugins } from "./plugins-Do0arFjS.mjs";
 import { SETTINGS_TABLE, WRITE_GUARD_TABLE, coreSettings, coreTarget, createTableStatements, generateEngineSql, isMultiIndex } from "@hot-updater/plugin-core";
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/init/index.cjs

@@ -48,6 +48,7 @@ let node_stream = require("node:stream");
 let node_buffer = require("node:buffer");
 let _hot_updater_server_plugins_api_keys = require("@hot-updater/server/plugins/api-keys");
 let _hot_updater_server_plugins_insights = require("@hot-updater/server/plugins/insights");
+let _hot_updater_server_plugins_remote_config = require("@hot-updater/server/plugins/remote-config");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let _supabase_supabase_js = require("@supabase/supabase-js");
 //#region ../../node_modules/.pnpm/es-toolkit@1.47.0/node_modules/es-toolkit/dist/_internal/globalThis.mjs
@@ -6335,10 +6336,14 @@ const { sendMessage, getOneMessage, getEachMessage, getCancelSignal } = getIpcEx
 //#endregion
 //#region src/plugins.ts
 /**
-* The plugins the managed Supabase server runs: Insights, and API keys on every
-* client route. Its Edge Function imports this list.
+* The plugins the managed Supabase server runs: Insights, API keys on every
+* client route, and Remote Config. Its Edge Function imports this list.
 */
-const plugins = [(0, _hot_updater_server_plugins_insights.insights)(), (0, _hot_updater_server_plugins_api_keys.apiKeys)()];
+const plugins = [
+	(0, _hot_updater_server_plugins_insights.insights)(),
+	(0, _hot_updater_server_plugins_api_keys.apiKeys)(),
+	(0, _hot_updater_server_plugins_remote_config.remoteConfig)()
+];
 //#endregion
 //#region src/supabaseConfig.ts
 const resolveSupabaseServiceRoleKey = (config) => {

package/dist/init/index.mjs

@@ -19,6 +19,7 @@ import { Duplex, PassThrough, Readable, Transform, Writable, getDefaultHighWater
 import { Buffer as Buffer$1 } from "node:buffer";
 import { apiKeys } from "@hot-updater/server/plugins/api-keys";
 import { insights } from "@hot-updater/server/plugins/insights";
+import { remoteConfig } from "@hot-updater/server/plugins/remote-config";
 import { SETTINGS_TABLE, createEngineDatabase, createSqlAdapter } from "@hot-updater/plugin-core";
 import { createClient } from "@supabase/supabase-js";
 //#region \0rolldown/runtime.js
@@ -6330,10 +6331,14 @@ const { sendMessage, getOneMessage, getEachMessage, getCancelSignal } = getIpcEx
 //#endregion
 //#region src/plugins.ts
 /**
-* The plugins the managed Supabase server runs: Insights, and API keys on every
-* client route. Its Edge Function imports this list.
+* The plugins the managed Supabase server runs: Insights, API keys on every
+* client route, and Remote Config. Its Edge Function imports this list.
 */
-const plugins = [insights(), apiKeys()];
+const plugins = [
+	insights(),
+	apiKeys(),
+	remoteConfig()
+];
 //#endregion
 //#region src/supabaseConfig.ts
 const resolveSupabaseServiceRoleKey = (config) => {

package/dist/{plugins-jpIkI_T2.cjs → plugins-C3qJSy3_.cjs}

@@ -2,6 +2,7 @@ let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let _supabase_supabase_js = require("@supabase/supabase-js");
 let _hot_updater_server_plugins_api_keys = require("@hot-updater/server/plugins/api-keys");
 let _hot_updater_server_plugins_insights = require("@hot-updater/server/plugins/insights");
+let _hot_updater_server_plugins_remote_config = require("@hot-updater/server/plugins/remote-config");
 //#region src/supabaseConfig.ts
 const resolveSupabaseServiceRoleKey = (config) => {
 	if (!config.supabaseServiceRoleKey) throw new Error("Supabase service role key is required. Set supabaseServiceRoleKey.");
@@ -232,10 +233,14 @@ const supabaseStorage = (config) => {
 //#endregion
 //#region src/plugins.ts
 /**
-* The plugins the managed Supabase server runs: Insights, and API keys on every
-* client route. Its Edge Function imports this list.
+* The plugins the managed Supabase server runs: Insights, API keys on every
+* client route, and Remote Config. Its Edge Function imports this list.
 */
-const plugins = [(0, _hot_updater_server_plugins_insights.insights)(), (0, _hot_updater_server_plugins_api_keys.apiKeys)()];
+const plugins = [
+	(0, _hot_updater_server_plugins_insights.insights)(),
+	(0, _hot_updater_server_plugins_api_keys.apiKeys)(),
+	(0, _hot_updater_server_plugins_remote_config.remoteConfig)()
+];
 //#endregion
 Object.defineProperty(exports, "SUPABASE_APPLY_FUNCTION", {
 	enumerable: true,

package/dist/{plugins-Dj-4Pk3j.mjs → plugins-Do0arFjS.mjs}

@@ -2,6 +2,7 @@ import { SETTINGS_TABLE, createEngineDatabase, createSqlAdapter, createStorageAd
 import { createClient } from "@supabase/supabase-js";
 import { apiKeys } from "@hot-updater/server/plugins/api-keys";
 import { insights } from "@hot-updater/server/plugins/insights";
+import { remoteConfig } from "@hot-updater/server/plugins/remote-config";
 //#region src/supabaseConfig.ts
 const resolveSupabaseServiceRoleKey = (config) => {
 	if (!config.supabaseServiceRoleKey) throw new Error("Supabase service role key is required. Set supabaseServiceRoleKey.");
@@ -232,9 +233,13 @@ const supabaseStorage = (config) => {
 //#endregion
 //#region src/plugins.ts
 /**
-* The plugins the managed Supabase server runs: Insights, and API keys on every
-* client route. Its Edge Function imports this list.
+* The plugins the managed Supabase server runs: Insights, API keys on every
+* client route, and Remote Config. Its Edge Function imports this list.
 */
-const plugins = [insights(), apiKeys()];
+const plugins = [
+	insights(),
+	apiKeys(),
+	remoteConfig()
+];
 //#endregion
 export { SUPABASE_TABLE_PREFIX as a, SUPABASE_APPLY_FUNCTION as i, supabaseStorage as n, supabaseDatabase as r, plugins as t };

package/dist/{supabaseDatabase-DPvSBD18.d.cts → supabaseDatabase-DV5XdQWp.d.cts}

@@ -330,10 +330,198 @@ interface CreatedApiKey {
   readonly record: ApiKeyMetadata;
 }
 //#endregion
+//#region ../remote-config/dist/shared/wire.d.mts
+//#region src/shared/wire.d.ts
+/** What a device tells the server, so the server can evaluate conditions. */
+interface RemoteConfigDeviceContext {
+  readonly platform: "ios" | "android";
+  /** The native app version, or null when the build has none. */
+  readonly appVersion: string | null;
+  readonly channel: string;
+  /** A numeric cohort from 1 to 1000, or a custom cohort's slug. */
+  readonly cohort: string;
+  /** The native build's fingerprint, or null without one. */
+  readonly fingerprintHash: string | null;
+}
+/** The body of a `200` from `GET /remote-config`. */
+interface RemoteConfigFetchResponse {
+  /** The published template version the values come from; 0 before the first publish. */
+  readonly version: number;
+  /**
+   * Each parameter's value for this device, as text. A parameter whose
+   * value is the app's own default is left out.
+   */
+  readonly values: Readonly<Record<string, string>>;
+}
+//#endregion
+//#region ../remote-config/dist/server/template.d.mts
+//#region src/server/template.d.ts
+/**
+ * How the Console edits a parameter's value and checks it before a publish.
+ * Devices receive every value as text.
+ */
+type RemoteConfigValueType = "STRING" | "NUMBER" | "BOOLEAN" | "JSON";
+/** A value a parameter takes: text, or the app's own default. */
+type RemoteConfigParameterValue = {
+  readonly value: string;
+} | {
+  readonly useInAppDefault: true;
+};
+interface RemoteConfigParameter {
+  readonly valueType: RemoteConfigValueType;
+  /** The value when none of the parameter's conditions match. */
+  readonly defaultValue: RemoteConfigParameterValue;
+  /**
+   * Values by condition name. When several of these conditions match, the
+   * one listed first in the template's `conditions` wins.
+   */
+  readonly conditionalValues?: Readonly<Record<string, RemoteConfigParameterValue>>;
+  readonly description?: string;
+}
+/** A test on a device's context; a condition matches when all of its rules do. */
+type RemoteConfigRule = {
+  readonly type: "platform";
+  readonly platforms: readonly ("ios" | "android")[];
+} | {
+  readonly type: "channel";
+  readonly channels: readonly string[];
+} |
+/** A semver range, such as `>=1.4.0` or `2.x`, as release targets use. */
+{
+  readonly type: "appVersion";
+  readonly range: string;
+} |
+/** Devices whose cohort is one of these: numbers from 1 to 1000 or slugs. */
+{
+  readonly type: "cohort";
+  readonly cohorts: readonly string[];
+} |
+/**
+ * A share of numeric cohorts: the devices whose cohort lands in
+ * `[from, to)` percent once `seed` shuffles the 1,000 cohorts. Rules with
+ * one seed pick from one order, so `0–10` and `10–20` never overlap; a new
+ * seed picks other devices. Custom cohorts never match.
+ */
+{
+  readonly type: "percent";
+  readonly seed: string;
+  readonly from: number;
+  readonly to: number;
+} | {
+  readonly type: "fingerprint";
+  readonly hashes: readonly string[];
+} |
+/**
+ * While the server's clock is in `[from, to)`: ISO 8601 date-times in UTC,
+ * either of them open. A device gets the change at its next fetch.
+ */
+{
+  readonly type: "dateTime";
+  readonly from?: string;
+  readonly to?: string;
+};
+interface RemoteConfigCondition {
+  /** Unique in the template; parameters name it in `conditionalValues`. */
+  readonly name: string;
+  /** Every rule must match. */
+  readonly rules: readonly RemoteConfigRule[];
+}
+/**
+ * Everything Remote Config serves, published as a whole and versioned.
+ */
+interface RemoteConfigTemplate {
+  /** In priority order: the first one that matches decides a parameter's value. */
+  readonly conditions: readonly RemoteConfigCondition[];
+  readonly parameters: Readonly<Record<string, RemoteConfigParameter>>;
+}
+/** What the server knows of a device; a rule on a missing field never matches. */
+type RemoteConfigEvaluationContext = Partial<Readonly<{ [K in keyof RemoteConfigDeviceContext]: RemoteConfigDeviceContext[K] | null; }>> & {
+  /**
+   * When to evaluate, in ms since the epoch. The server uses its own clock;
+   * a `dateTime` rule never matches without it.
+   */
+  readonly now?: number;
+};
+//#endregion
+//#region ../remote-config/dist/server/api.d.mts
+//#region src/server/api.d.ts
+/** A published version's record, without its template. */
+interface RemoteConfigVersion {
+  readonly version: number;
+  readonly description: string | null;
+  /** `ROLLBACK` when the version copies `rollbackSource`. */
+  readonly updateType: "PUBLISH" | "ROLLBACK";
+  readonly rollbackSource: number | null;
+  readonly createdAtMs: number;
+}
+interface RemoteConfigVersionDetail extends RemoteConfigVersion {
+  readonly template: RemoteConfigTemplate;
+}
+/** The template devices receive now. */
+interface RemoteConfigActive {
+  /** 0, with an empty template, before the first publish. */
+  readonly version: number;
+  readonly template: RemoteConfigTemplate;
+  readonly updatedAtMs: number | null;
+}
+/**
+ * How a publish or a rollback ended: `conflict` when another publish moved
+ * the active version past `baseVersion` first, so a stale edit never
+ * replaces a newer template.
+ */
+type RemoteConfigPublishResult = {
+  readonly status: "published";
+  readonly version: RemoteConfigVersion;
+} | {
+  readonly status: "conflict";
+  readonly currentVersion: number;
+};
+interface RemoteConfigVersionsPage {
+  /** Newest first. */
+  readonly versions: readonly RemoteConfigVersion[];
+  /** Pass as `cursor` for the next page; absent on the last one. */
+  readonly next?: string;
+}
+/** `hotUpdater.api.remoteConfig`. */
+interface RemoteConfigApi {
+  /** The active template and its version. */
+  getActive(): Promise<RemoteConfigActive>;
+  /**
+   * Validates and publishes a template as the next version. Throws
+   * `RemoteConfigValidationError` for an invalid template.
+   */
+  publish(input: {
+    readonly template: unknown;
+    /** The version the edit started from; 0 before the first publish. */
+    readonly baseVersion: number;
+    readonly description?: string;
+  }): Promise<RemoteConfigPublishResult>;
+  /** Publishes a copy of an earlier version; `not_found` when it does not exist. */
+  rollback(input: {
+    readonly version: number;
+    readonly baseVersion: number;
+    readonly description?: string;
+  }): Promise<RemoteConfigPublishResult | {
+    readonly status: "not_found";
+  }>;
+  /** One page of published versions, newest first. */
+  listVersions(input?: {
+    readonly limit?: number;
+    readonly cursor?: string;
+  }): Promise<RemoteConfigVersionsPage>;
+  /** One version with its template, or null. */
+  getVersion(version: number): Promise<RemoteConfigVersionDetail | null>;
+  /**
+   * What a device with this context receives from `GET /remote-config`, at
+   * `context.now` or, without it, now.
+   */
+  resolve(context: RemoteConfigEvaluationContext): Promise<RemoteConfigFetchResponse>;
+}
+//#endregion
 //#region src/plugins.d.ts
 /**
- * The plugins the managed Supabase server runs: Insights, and API keys on every
- * client route. Its Edge Function imports this list.
+ * The plugins the managed Supabase server runs: Insights, API keys on every
+ * client route, and Remote Config. Its Edge Function imports this list.
  */
 declare const plugins: readonly [import("@hot-updater/plugin-core").HotUpdaterPlugin<"insights", {
   readonly bundle_events: import("@hot-updater/plugin-core").TableDefinition<{
@@ -775,7 +963,55 @@ declare const plugins: readonly [import("@hot-updater/plugin-core").HotUpdaterPl
   };
 }, {
   readonly clientAuth: true;
-}>];
+}>, import("@hot-updater/plugin-core").HotUpdaterPlugin<"remoteConfig", {
+  readonly remote_config_active: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly id: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly version: {
+      readonly type: "integer";
+    };
+    readonly template: {
+      readonly type: "json";
+    };
+    readonly updated_at_ms: {
+      readonly type: "integer";
+    };
+  }, {}, {}, readonly ["id"]>;
+  readonly remote_config_versions: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly version: {
+      readonly type: "integer";
+    };
+    readonly template: {
+      readonly type: "json";
+    };
+    readonly description: {
+      readonly type: "string";
+      readonly maxLength: 256;
+      readonly required: false;
+    };
+    readonly update_type: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly rollback_source: {
+      readonly type: "integer";
+      readonly required: false;
+    };
+    readonly created_at_ms: {
+      readonly type: "integer";
+    };
+  }, {}, {
+    readonly byVersion: {
+      readonly eq: readonly [];
+      readonly sort: readonly ["version"];
+    };
+  }, readonly ["version"]>;
+}, {
+  api: RemoteConfigApi;
+  endpoints: readonly import("@hot-updater/plugin-core").PluginEndpoint[];
+}, {}>];
 //#endregion
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {

package/dist/{supabaseDatabase-DPvSBD18.d.mts → supabaseDatabase-DV5XdQWp.d.mts}

@@ -330,10 +330,198 @@ interface CreatedApiKey {
   readonly record: ApiKeyMetadata;
 }
 //#endregion
+//#region ../remote-config/dist/shared/wire.d.mts
+//#region src/shared/wire.d.ts
+/** What a device tells the server, so the server can evaluate conditions. */
+interface RemoteConfigDeviceContext {
+  readonly platform: "ios" | "android";
+  /** The native app version, or null when the build has none. */
+  readonly appVersion: string | null;
+  readonly channel: string;
+  /** A numeric cohort from 1 to 1000, or a custom cohort's slug. */
+  readonly cohort: string;
+  /** The native build's fingerprint, or null without one. */
+  readonly fingerprintHash: string | null;
+}
+/** The body of a `200` from `GET /remote-config`. */
+interface RemoteConfigFetchResponse {
+  /** The published template version the values come from; 0 before the first publish. */
+  readonly version: number;
+  /**
+   * Each parameter's value for this device, as text. A parameter whose
+   * value is the app's own default is left out.
+   */
+  readonly values: Readonly<Record<string, string>>;
+}
+//#endregion
+//#region ../remote-config/dist/server/template.d.mts
+//#region src/server/template.d.ts
+/**
+ * How the Console edits a parameter's value and checks it before a publish.
+ * Devices receive every value as text.
+ */
+type RemoteConfigValueType = "STRING" | "NUMBER" | "BOOLEAN" | "JSON";
+/** A value a parameter takes: text, or the app's own default. */
+type RemoteConfigParameterValue = {
+  readonly value: string;
+} | {
+  readonly useInAppDefault: true;
+};
+interface RemoteConfigParameter {
+  readonly valueType: RemoteConfigValueType;
+  /** The value when none of the parameter's conditions match. */
+  readonly defaultValue: RemoteConfigParameterValue;
+  /**
+   * Values by condition name. When several of these conditions match, the
+   * one listed first in the template's `conditions` wins.
+   */
+  readonly conditionalValues?: Readonly<Record<string, RemoteConfigParameterValue>>;
+  readonly description?: string;
+}
+/** A test on a device's context; a condition matches when all of its rules do. */
+type RemoteConfigRule = {
+  readonly type: "platform";
+  readonly platforms: readonly ("ios" | "android")[];
+} | {
+  readonly type: "channel";
+  readonly channels: readonly string[];
+} |
+/** A semver range, such as `>=1.4.0` or `2.x`, as release targets use. */
+{
+  readonly type: "appVersion";
+  readonly range: string;
+} |
+/** Devices whose cohort is one of these: numbers from 1 to 1000 or slugs. */
+{
+  readonly type: "cohort";
+  readonly cohorts: readonly string[];
+} |
+/**
+ * A share of numeric cohorts: the devices whose cohort lands in
+ * `[from, to)` percent once `seed` shuffles the 1,000 cohorts. Rules with
+ * one seed pick from one order, so `0–10` and `10–20` never overlap; a new
+ * seed picks other devices. Custom cohorts never match.
+ */
+{
+  readonly type: "percent";
+  readonly seed: string;
+  readonly from: number;
+  readonly to: number;
+} | {
+  readonly type: "fingerprint";
+  readonly hashes: readonly string[];
+} |
+/**
+ * While the server's clock is in `[from, to)`: ISO 8601 date-times in UTC,
+ * either of them open. A device gets the change at its next fetch.
+ */
+{
+  readonly type: "dateTime";
+  readonly from?: string;
+  readonly to?: string;
+};
+interface RemoteConfigCondition {
+  /** Unique in the template; parameters name it in `conditionalValues`. */
+  readonly name: string;
+  /** Every rule must match. */
+  readonly rules: readonly RemoteConfigRule[];
+}
+/**
+ * Everything Remote Config serves, published as a whole and versioned.
+ */
+interface RemoteConfigTemplate {
+  /** In priority order: the first one that matches decides a parameter's value. */
+  readonly conditions: readonly RemoteConfigCondition[];
+  readonly parameters: Readonly<Record<string, RemoteConfigParameter>>;
+}
+/** What the server knows of a device; a rule on a missing field never matches. */
+type RemoteConfigEvaluationContext = Partial<Readonly<{ [K in keyof RemoteConfigDeviceContext]: RemoteConfigDeviceContext[K] | null; }>> & {
+  /**
+   * When to evaluate, in ms since the epoch. The server uses its own clock;
+   * a `dateTime` rule never matches without it.
+   */
+  readonly now?: number;
+};
+//#endregion
+//#region ../remote-config/dist/server/api.d.mts
+//#region src/server/api.d.ts
+/** A published version's record, without its template. */
+interface RemoteConfigVersion {
+  readonly version: number;
+  readonly description: string | null;
+  /** `ROLLBACK` when the version copies `rollbackSource`. */
+  readonly updateType: "PUBLISH" | "ROLLBACK";
+  readonly rollbackSource: number | null;
+  readonly createdAtMs: number;
+}
+interface RemoteConfigVersionDetail extends RemoteConfigVersion {
+  readonly template: RemoteConfigTemplate;
+}
+/** The template devices receive now. */
+interface RemoteConfigActive {
+  /** 0, with an empty template, before the first publish. */
+  readonly version: number;
+  readonly template: RemoteConfigTemplate;
+  readonly updatedAtMs: number | null;
+}
+/**
+ * How a publish or a rollback ended: `conflict` when another publish moved
+ * the active version past `baseVersion` first, so a stale edit never
+ * replaces a newer template.
+ */
+type RemoteConfigPublishResult = {
+  readonly status: "published";
+  readonly version: RemoteConfigVersion;
+} | {
+  readonly status: "conflict";
+  readonly currentVersion: number;
+};
+interface RemoteConfigVersionsPage {
+  /** Newest first. */
+  readonly versions: readonly RemoteConfigVersion[];
+  /** Pass as `cursor` for the next page; absent on the last one. */
+  readonly next?: string;
+}
+/** `hotUpdater.api.remoteConfig`. */
+interface RemoteConfigApi {
+  /** The active template and its version. */
+  getActive(): Promise<RemoteConfigActive>;
+  /**
+   * Validates and publishes a template as the next version. Throws
+   * `RemoteConfigValidationError` for an invalid template.
+   */
+  publish(input: {
+    readonly template: unknown;
+    /** The version the edit started from; 0 before the first publish. */
+    readonly baseVersion: number;
+    readonly description?: string;
+  }): Promise<RemoteConfigPublishResult>;
+  /** Publishes a copy of an earlier version; `not_found` when it does not exist. */
+  rollback(input: {
+    readonly version: number;
+    readonly baseVersion: number;
+    readonly description?: string;
+  }): Promise<RemoteConfigPublishResult | {
+    readonly status: "not_found";
+  }>;
+  /** One page of published versions, newest first. */
+  listVersions(input?: {
+    readonly limit?: number;
+    readonly cursor?: string;
+  }): Promise<RemoteConfigVersionsPage>;
+  /** One version with its template, or null. */
+  getVersion(version: number): Promise<RemoteConfigVersionDetail | null>;
+  /**
+   * What a device with this context receives from `GET /remote-config`, at
+   * `context.now` or, without it, now.
+   */
+  resolve(context: RemoteConfigEvaluationContext): Promise<RemoteConfigFetchResponse>;
+}
+//#endregion
 //#region src/plugins.d.ts
 /**
- * The plugins the managed Supabase server runs: Insights, and API keys on every
- * client route. Its Edge Function imports this list.
+ * The plugins the managed Supabase server runs: Insights, API keys on every
+ * client route, and Remote Config. Its Edge Function imports this list.
  */
 declare const plugins: readonly [import("@hot-updater/plugin-core").HotUpdaterPlugin<"insights", {
   readonly bundle_events: import("@hot-updater/plugin-core").TableDefinition<{
@@ -775,7 +963,55 @@ declare const plugins: readonly [import("@hot-updater/plugin-core").HotUpdaterPl
   };
 }, {
   readonly clientAuth: true;
-}>];
+}>, import("@hot-updater/plugin-core").HotUpdaterPlugin<"remoteConfig", {
+  readonly remote_config_active: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly id: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly version: {
+      readonly type: "integer";
+    };
+    readonly template: {
+      readonly type: "json";
+    };
+    readonly updated_at_ms: {
+      readonly type: "integer";
+    };
+  }, {}, {}, readonly ["id"]>;
+  readonly remote_config_versions: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly version: {
+      readonly type: "integer";
+    };
+    readonly template: {
+      readonly type: "json";
+    };
+    readonly description: {
+      readonly type: "string";
+      readonly maxLength: 256;
+      readonly required: false;
+    };
+    readonly update_type: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly rollback_source: {
+      readonly type: "integer";
+      readonly required: false;
+    };
+    readonly created_at_ms: {
+      readonly type: "integer";
+    };
+  }, {}, {
+    readonly byVersion: {
+      readonly eq: readonly [];
+      readonly sort: readonly ["version"];
+    };
+  }, readonly ["version"]>;
+}, {
+  api: RemoteConfigApi;
+  endpoints: readonly import("@hot-updater/plugin-core").PluginEndpoint[];
+}, {}>];
 //#endregion
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/supabase",
   "type": "module",
-  "version": "1.0.0-rc.40",
+  "version": "1.0.0-rc.42",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -51,10 +51,10 @@
     "@supabase/supabase-js": "2.76.1",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/protocol": "1.0.0-rc.40",
-    "@hot-updater/cli-tools": "1.0.0-rc.40",
-    "@hot-updater/server": "1.0.0-rc.40",
-    "@hot-updater/plugin-core": "1.0.0-rc.40"
+    "@hot-updater/protocol": "1.0.0-rc.42",
+    "@hot-updater/plugin-core": "1.0.0-rc.42",
+    "@hot-updater/cli-tools": "1.0.0-rc.42",
+    "@hot-updater/server": "1.0.0-rc.42"
   },
   "devDependencies": {
     "@electric-sql/pglite": "0.4.1",
@@ -64,9 +64,9 @@
     "execa": "9.5.2",
     "@types/node": "^20",
     "mime": "^4.0.4",
-    "@hot-updater/test-utils": "1.0.0-rc.40",
-    "@hot-updater/postgres": "1.0.0-rc.40",
-    "@hot-updater/mock": "1.0.0-rc.40"
+    "@hot-updater/mock": "1.0.0-rc.42",
+    "@hot-updater/test-utils": "1.0.0-rc.42",
+    "@hot-updater/postgres": "1.0.0-rc.42"
   },
   "scripts": {
     "build": "tsdown",

package/supabase/migrations/{20260818000000_hot-updater_1.0.0.sql → 0001_hot-updater_1.0.0.sql}

@@ -104,6 +104,10 @@ CREATE INDEX IF NOT EXISTS "hot_updater_v1_api_keys_byCreated" ON "hot_updater_v
 
 CREATE UNIQUE INDEX IF NOT EXISTS "hot_updater_v1_api_keys_hash" ON "hot_updater_v1_api_keys" ("hash");
 
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_remote_config_active" ("id" varchar(16) COLLATE "C" NOT NULL, "version" bigint NOT NULL, "template" jsonb NOT NULL, "updated_at_ms" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_remote_config_versions" ("version" bigint NOT NULL, "template" jsonb NOT NULL, "description" varchar(256) COLLATE "C", "update_type" varchar(16) COLLATE "C" NOT NULL, "rollback_source" bigint, "created_at_ms" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("version"));
+
 CREATE TABLE IF NOT EXISTS "hot_updater_v1_private_hot_updater_settings" ("key" varchar(255) COLLATE "C" NOT NULL, "value" varchar(255) COLLATE "C" NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("key"));
 
 ALTER TABLE "hot_updater_v1_bundles" ENABLE ROW LEVEL SECURITY;
@@ -148,6 +152,10 @@ ALTER TABLE "hot_updater_v1_insights_failures" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1_api_keys" ENABLE ROW LEVEL SECURITY;
 
+ALTER TABLE "hot_updater_v1_remote_config_active" ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE "hot_updater_v1_remote_config_versions" ENABLE ROW LEVEL SECURITY;
+
 ALTER TABLE "hot_updater_v1_private_hot_updater_settings" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1__hu_write" ENABLE ROW LEVEL SECURITY;
@@ -171,7 +179,7 @@ BEGIN
   FOR item IN SELECT value FROM jsonb_array_elements(p_statements) LOOP
     statement := item->>'sql';
     FOR target IN SELECT (regexp_matches(statement, '(?:FROM|INTO|UPDATE|JOIN) "([^"]+)"', 'g'))[1] LOOP
-      IF NOT target = ANY (ARRAY['hot_updater_v1_bundles', 'hot_updater_v1_bundle_patches', 'hot_updater_v1_releases', 'hot_updater_v1_release_catalogs', 'hot_updater_v1_channels', 'hot_updater_v1_bundle_totals', 'hot_updater_v1_bundle_events', 'hot_updater_v1_bundle_events__byBundle', 'hot_updater_v1_bundle_event_heads', 'hot_updater_v1_insights_overview', 'hot_updater_v1_insights_sketches', 'hot_updater_v1_insights_overview_daily', 'hot_updater_v1_insights_sketches_daily', 'hot_updater_v1_insights_overview_lifetime', 'hot_updater_v1_insights_sketches_lifetime', 'hot_updater_v1_insights_distribution', 'hot_updater_v1_insights_builtin_distribution', 'hot_updater_v1_insights_latest_by_bundle', 'hot_updater_v1_insights_outcomes', 'hot_updater_v1_insights_failures', 'hot_updater_v1_api_keys', 'hot_updater_v1_private_hot_updater_settings', 'hot_updater_v1__hu_write']) THEN
+      IF NOT target = ANY (ARRAY['hot_updater_v1_bundles', 'hot_updater_v1_bundle_patches', 'hot_updater_v1_releases', 'hot_updater_v1_release_catalogs', 'hot_updater_v1_channels', 'hot_updater_v1_bundle_totals', 'hot_updater_v1_bundle_events', 'hot_updater_v1_bundle_events__byBundle', 'hot_updater_v1_bundle_event_heads', 'hot_updater_v1_insights_overview', 'hot_updater_v1_insights_sketches', 'hot_updater_v1_insights_overview_daily', 'hot_updater_v1_insights_sketches_daily', 'hot_updater_v1_insights_overview_lifetime', 'hot_updater_v1_insights_sketches_lifetime', 'hot_updater_v1_insights_distribution', 'hot_updater_v1_insights_builtin_distribution', 'hot_updater_v1_insights_latest_by_bundle', 'hot_updater_v1_insights_outcomes', 'hot_updater_v1_insights_failures', 'hot_updater_v1_api_keys', 'hot_updater_v1_remote_config_active', 'hot_updater_v1_remote_config_versions', 'hot_updater_v1_private_hot_updater_settings', 'hot_updater_v1__hu_write']) THEN
         RAISE EXCEPTION 'hot_updater_v1_apply: % is not a Hot Updater table', target USING ERRCODE = '42501';
       END IF;
     END LOOP;
@@ -209,3 +217,5 @@ INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v")
 INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.insights', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
 
 INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.apiKeys', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
+
+INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.remoteConfig', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";