@hot-updater/test-utils 1.0.0-rc.16 → 1.0.0-rc.21

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { NIL_UUID, createReleaseCatalogScopeKey, encodeChannelKey, selectDesiredRelease } from "@hot-updater/core";
-import { DatabaseAdapterContractError, createMemoryAdapter, findPhysicalIndex, indexOrderTuple, verifyAdapter } from "@hot-updater/plugin-core/internal";
+import { NIL_UUID, createReleaseCatalogScopeKey, encodeChannelKey, selectDesiredRelease } from "@hot-updater/protocol";
+import { DATABASE_VERSION_COLUMN, DatabaseAdapterContractError, SETTINGS_TABLE, addDistinct, aggregateBatchingTables, assertStorageOperations, bundleToPatchRows, bundleToRow, compareUtf8, coreSchema, countDistinct, createBundleStorageKey, createEngine, createMemoryAdapter, createStorageKeyBuilder, createStorageRootUriWithPath, createStorageUri, createStorageUriWithRelativePath, findPhysicalIndex, getBundleArchiveStorageUri, getContentAddressedAssetStoragePath, indexOrderColumns, meterReads, parseStorageDownloadPath, parseStorageUri, targetBaseCandidateKey, toolingTargetOf, verifyAdapter } from "@hot-updater/plugin-core";
 import { createServer } from "node:http";
 //#region src/adminApiTestClient.ts
 const jsonRequest = (method, body) => ({
@@ -80,9 +80,18 @@ const createAdminApiTestClient = (getClient) => {
 };
 //#endregion
 //#region src/databaseTestFixtures.ts
-const fixtureId = (suffix) => `00000000-0000-7000-8000-${suffix.padStart(12, "0")}`;
+const fixtureId$1 = (suffix) => `00000000-0000-7000-8000-${suffix.padStart(12, "0")}`;
+const channelFixtureSuffix = (name) => {
+	let hash = 0;
+	for (const character of name) hash = (hash * 31 + character.codePointAt(0)) % 0xe8d4a51000;
+	return String(hash);
+};
+const createChannelRowFixture = (name = "production") => ({
+	id: fixtureId$1(channelFixtureSuffix(name)),
+	name
+});
 const createBundleRowFixture = (suffix, _channel = "production") => ({
-	id: fixtureId(suffix),
+	id: fixtureId$1(suffix),
 	platform: "ios",
 	git_commit_hash: null,
 	metadata: { app_version: suffix },
@@ -100,29 +109,29 @@ const createBundlePatchRowFixture = (suffix, bundleId, baseBundleId, orderIndex
 	byte_size: 3000000002,
 	order_index: orderIndex
 });
-const createBundleEventRowFixture = (suffix, receivedAtMs) => ({
-	id: fixtureId(suffix),
-	type: "UPDATE_APPLIED",
-	install_id: `install-${suffix}`,
-	user_id: null,
-	metadata: {
-		username: null,
-		cohort: "0",
-		update_strategy: "appVersion",
-		fingerprint_hash: null,
-		sdk_version: null
-	},
-	from_bundle_id: fixtureId(`${Number(suffix) + 1e3}`),
-	from_release_id: null,
-	to_bundle_id: fixtureId(`${Number(suffix) + 2e3}`),
-	to_release_id: null,
-	platform: "ios",
-	app_version: "1.0.0",
-	channel: "production",
-	received_at_ms: receivedAtMs
+const createReleaseRowFixture = (suffix, bundle, channel) => ({
+	id: fixtureId$1(`${Number(suffix) + 5e3}`),
+	scope_key: `v1:app-version:ios:${channel.name}`,
+	channel_id: channel.id,
+	platform: bundle.platform,
+	kind: "BUNDLE",
+	bundle_id: bundle.id,
+	strategy: "APP_VERSION",
+	target_app_version: "1.0.0",
+	fingerprint_hash: null,
+	enabled: true,
+	should_force_update: false,
+	message: `release-${suffix}`,
+	rollout_cohort_count: 1e3,
+	target_cohorts: [],
+	operation: "DEPLOY",
+	source_release_id: null,
+	revision: 1,
+	created_at_ms: Number(suffix),
+	updated_at_ms: Number(suffix)
 });
 const createBundleFixture = (suffix, _channel = "production") => ({
-	id: fixtureId(suffix),
+	id: fixtureId$1(suffix),
 	platform: "ios",
 	gitCommitHash: null,
 	metadata: { app_version: suffix },
@@ -374,1175 +383,481 @@ const setupCoreAdminTestSuite = (options) => {
 	});
 };
 //#endregion
-//#region src/expectInsightsIndex.ts
-/** Allow committed secondary indexes to catch up; query failures still fail. */
-const expectInsightsIndex = async (query, expected) => {
-	const deadline = Date.now() + 5e3;
-	for (;;) {
-		const actual = await query();
-		try {
-			expect(actual).toEqual(expected);
-			return;
-		} catch (error) {
-			if (Date.now() >= deadline) throw error;
-		}
-		await new Promise((resolve) => setTimeout(resolve, 50));
-	}
-};
-//#endregion
-//#region src/setupInsightsHttpTestSuite.ts
+//#region src/setupSemverSatisfiesTestSuite.ts
 /**
-* The Insights plugin's routes on a database: a client reports an event, and
-* the admin routes read it back. The server must run `insights()`.
+*
+* Filters based on semver. And sorts by the highest bundle version.
+*
+* * Range Expression Table:
+*
+* | Range Expression | Who gets the update                                                    |
+* |------------------|------------------------------------------------------------------------|
+* | 1.2.3            | Only devices running the specific binary app store version 1.2.3 of your app |
+* | *                | Any device configured to consume updates from your CodePush app         |
+* | 1.2.x            | Devices running major version 1, minor version 2 and any patch version of your app |
+* | 1.2.3 - 1.2.7    | Devices running any binary version between 1.2.3 (inclusive) and 1.2.7 (inclusive) |
+* | >=1.2.3 <1.2.7   | Devices running any binary version between 1.2.3 (inclusive) and 1.2.7 (exclusive) |
+* | 1.2              | Equivalent to >=1.2.0 <1.3.0                                            |
+* | ~1.2.3           | Equivalent to >=1.2.3 <1.3.0                                            |
+* | ^1.2.3           | Equivalent to >=1.2.3 <2.0.0                                            |
 */
-const setupInsightsHttpTestSuite = (options) => {
-	describe("Insights HTTP routes", () => {
-		it("records a reported event and reads it back", async () => {
-			const client = options.getClient();
-			const installId = `install-${crypto.randomUUID()}`;
-			const userId = `user-${crypto.randomUUID()}`;
-			const channel = `insights-${crypto.randomUUID()}`;
-			const event = {
-				appVersion: "1.0.0",
-				channel,
-				cohort: "default",
-				fingerprintHash: null,
-				fromBundleId: null,
-				fromReleaseId: null,
-				installId,
-				platform: "ios",
-				toBundleId: "00000000-0000-7000-8000-000000000001",
-				toReleaseId: null,
-				type: "UNCHANGED",
-				updateStrategy: null,
-				userId,
-				username: "Jane",
-				sdkVersion: "2.0.0"
-			};
-			const reported = await client.client("/events", jsonRequest("POST", event));
-			expect(reported.status).toBe(204);
-			expect(reported.headers.get("x-hot-updater-insights")).toBeNull();
-			await reported.text();
-			const installation = await client.admin(`/installations/${encodeURIComponent(installId)}`);
-			expect(installation.status).toBe(200);
-			expect(await installation.json()).toMatchObject({
-				installId,
-				latestStatus: "UNCHANGED",
-				lastKnownBundleId: event.toBundleId,
-				channel
-			});
-			await expectInsightsIndex(async () => {
-				return (await (await client.admin(`/installations?userId=${encodeURIComponent(userId)}`)).json()).data.map(({ installId: id }) => id);
-			}, [installId]);
-			await expectInsightsIndex(async () => {
-				return (await (await client.admin(`/overview?platform=ios&channel=${encodeURIComponent(channel)}&window=24h`)).json()).reportingInstallations.count;
-			}, 1);
-		});
-		it("refuses a malformed event", async () => {
-			const response = await options.getClient().client("/events", jsonRequest("POST", { type: "UNCHANGED" }));
-			expect(response.status).toBe(400);
-			await response.text();
-		});
+const setupSemverSatisfiesTestSuite = ({ semverSatisfies }) => {
+	it("version 1.2.3 should satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("1.2.3", "1.2.3")).toBe(true);
 	});
-};
-//#endregion
-//#region src/databaseTestRunner.ts
-var DatabaseUnavailableError = class extends Error {
-	constructor() {
-		super("The database is unavailable outside the test lifecycle");
-		this.name = "DatabaseUnavailableError";
-	}
-};
-const setupDatabaseTestRunner = (lifecycle, registerTests) => {
-	describe(lifecycle.name, () => {
-		let database;
-		const getDatabase = () => {
-			if (database === void 0) throw new DatabaseUnavailableError();
-			return database;
-		};
-		beforeAll(async () => {
-			await lifecycle.migrate();
-			database = await lifecycle.createDatabase();
-		});
-		beforeEach(async () => {
-			await lifecycle.reset(getDatabase());
-		});
-		afterAll(async () => {
-			await lifecycle.dispose(getDatabase());
-			database = void 0;
-		});
-		registerTests({ getDatabase });
+	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
 	});
-};
-//#endregion
-//#region src/insightsModelTests.ts
-const record = (model, event) => model.recordEvent({ event });
-const createMovementEvent = (suffix, receivedAtMs, type, installId) => {
-	const row = createBundleEventRowFixture(suffix, receivedAtMs);
-	return {
-		...row,
-		type,
-		install_id: installId,
-		from_bundle_id: row.to_bundle_id,
-		metadata: {
-			...row.metadata,
-			update_strategy: "appVersion"
-		}
-	};
-};
-/**
-* The Insights report contract on `InsightsModel`: what the Insights plugin
-* records and reads, through `createInsightsModel`, on one database.
-*/
-const registerInsightsModelTests = (state) => {
-	describe("Insights report contract", () => {
-		it("preserves ancillary JSON through event history and latest-event reads", async () => {
-			const model = state.getDatabase();
-			const base = createBundleEventRowFixture("979", 100);
-			const event = {
-				...base,
-				metadata: {
-					...base.metadata,
-					device: {
-						locale: "ko-KR",
-						tags: [
-							"minor",
-							null,
-							true,
-							2
-						]
-					},
-					diagnostic: null
-				}
-			};
-			await record(model, event);
-			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([event]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 101,
-				limit: 10
-			}), [event]);
-		});
-		it("selects the latest complete event across download, replacement, apply, and delayed reports", async () => {
-			const model = state.getDatabase();
-			const download = {
-				...createBundleEventRowFixture("980", 100),
-				type: "UPDATE_DOWNLOADED",
-				from_bundle_id: "00000000-0000-7000-8000-000000001980",
-				metadata: {
-					...createBundleEventRowFixture("980", 100).metadata,
-					update_strategy: "appVersion"
-				},
-				to_release_id: "00000000-0000-7000-8000-000000004980"
-			};
-			await record(model, download);
-			await record(model, download);
-			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([download]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: {
-					kind: "bundle",
-					type: "UPDATE_DOWNLOADED",
-					toBundleId: download.to_bundle_id,
-					platform: "ios",
-					channel: "production"
-				},
-				beforeReceivedAtMs: 200,
-				limit: 10
-			}), [download]);
-			const replacement = {
-				...download,
-				id: createBundleEventRowFixture("981", 110).id,
-				received_at_ms: 110,
-				to_bundle_id: "00000000-0000-7000-8000-000000002981"
-			};
-			await record(model, replacement);
-			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([replacement]);
-			const applied = {
-				...replacement,
-				type: "UPDATE_APPLIED",
-				id: createBundleEventRowFixture("982", 120).id,
-				received_at_ms: 120
-			};
-			await record(model, applied);
-			await record(model, {
-				...download,
-				id: createBundleEventRowFixture("983", 105).id,
-				received_at_ms: 105
-			});
-			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([applied]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: {
-					kind: "installationMovement",
-					installId: download.install_id
-				},
-				beforeReceivedAtMs: 200,
-				limit: 10
-			}), [
-				applied,
-				replacement,
-				{
-					...download,
-					id: createBundleEventRowFixture("983", 105).id,
-					received_at_ms: 105
-				},
-				download
-			]);
-		});
-		it("treats duplicate IDs as complete no-ops, including changed retry payloads", async () => {
-			const model = state.getDatabase();
-			const event = createBundleEventRowFixture("901", 100);
-			await Promise.all([
-				record(model, event),
-				record(model, event),
-				record(model, event)
-			]);
-			await record(model, event);
-			const changed = {
-				...event,
-				received_at_ms: 300,
-				user_id: "changed-user"
-			};
-			await record(model, changed);
-			const otherInstallation = {
-				...changed,
-				install_id: "different-install"
-			};
-			await record(model, otherInstallation);
-			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([event]);
-			await expect(model.findLatestEvents({ installId: otherInstallation.install_id })).resolves.toEqual([]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 400,
-				limit: 10
-			}), [event]);
+	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
+	});
+	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
+	});
+	it("1.x.x should satisfy version 1.0", async () => {
+		expect(await semverSatisfies("1.x.x", "1.0")).toBe(true);
+	});
+	it("1.x.x should satisfy version 1.12", async () => {
+		expect(await semverSatisfies("1.x.x", "1.12")).toBe(true);
+	});
+	it("1.x.x should satisfy version 1.0.0", async () => {
+		expect(await semverSatisfies("1.x.x", "1.0.0")).toBe(true);
+	});
+	it("1.x.x should satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("1.x.x", "1.2.3")).toBe(true);
+	});
+	it("1.x.x should not satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("1.x.x", "2.0.0")).toBe(false);
+	});
+	it("1.x.x should not satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("1.x.x", "2.0.0")).toBe(false);
+	});
+	it("1.2.x should satisfy version 1.2.5", async () => {
+		expect(await semverSatisfies("1.2.x", "1.2.5")).toBe(true);
+	});
+	it("1.2.x should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("1.2.x", "1.3.0")).toBe(false);
+	});
+	it("1.2.x should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("1.2.x", "1.3.0")).toBe(false);
+	});
+	it("range 1.2.3-1.2.7 should satisfy version 1.2.5", async () => {
+		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.2.5")).toBe(true);
+	});
+	it("range 1.2.3-1.2.7 should satisfy version 1.2.5", async () => {
+		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.2.5")).toBe(true);
+	});
+	it("range 1.2.3-1.2.7 should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.3.0")).toBe(false);
+	});
+	it("range >=1.2.3 <1.2.7 should satisfy version 1.2.5", async () => {
+		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.5")).toBe(true);
+	});
+	it("range >=1.2.3 <1.2.7 should satisfy version 1.2.5", async () => {
+		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.5")).toBe(true);
+	});
+	it("range >=1.2.3 <1.2.7 should not satisfy version 1.2.7", async () => {
+		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.7")).toBe(false);
+	});
+	it("~1.2.3 should satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.2.3")).toBe(true);
+	});
+	it("~1.2.3 should satisfy version 1.2.4", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.2.4")).toBe(true);
+	});
+	it("~1.2.3 should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.3.0")).toBe(false);
+	});
+	it("~1.2.3 should satisfy version 1.2.3", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.2.3")).toBe(true);
+	});
+	it("~1.2.3 should satisfy version 1.2.4", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.2.4")).toBe(true);
+	});
+	it("~1.2.3 should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("~1.2.3", "1.3.0")).toBe(false);
+	});
+	it("^1.2.3 should satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("^1.2.3", "1.3.0")).toBe(true);
+	});
+	it("^1.2.3 should satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("^1.2.3", "1.3.0")).toBe(true);
+	});
+	it("^1.2.3 should not satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("^1.2.3", "2.0.0")).toBe(false);
+	});
+	it("version 1.2 should satisfy version 1.2.0 (equivalent to >=1.2.0 <1.3.0)", async () => {
+		expect(await semverSatisfies("1.2", "1.2.0")).toBe(true);
+	});
+	it("version 1.2 should satisfy version 1.2.99 (equivalent to >=1.2.0 <1.3.0)", async () => {
+		expect(await semverSatisfies("1.2", "1.2.99")).toBe(true);
+	});
+	it("version 1.2 should not satisfy version 1.3.0", async () => {
+		expect(await semverSatisfies("1.2", "1.3.0")).toBe(false);
+	});
+	it("single-major '1' should satisfy version 1.0.0 (equivalent to >=1.0.0 <2.0.0)", async () => {
+		expect(await semverSatisfies("1", "1.0.0")).toBe(true);
+	});
+	it("single-major '1' should satisfy version 1.99.99", async () => {
+		expect(await semverSatisfies("1", "1.99.99")).toBe(true);
+	});
+	it("single-major '1' should not satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("1", "2.0.0")).toBe(false);
+	});
+	it("0.x.x should satisfy version 0.5.10", async () => {
+		expect(await semverSatisfies("0.x.x", "0.5.10")).toBe(true);
+	});
+	it("0.x.x should not satisfy version 1.0.0", async () => {
+		expect(await semverSatisfies("0.x.x", "1.0.0")).toBe(false);
+	});
+	it("2.x should satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("2.x", "2.0.0")).toBe(true);
+	});
+	it("2.x should satisfy version 2.10.1", async () => {
+		expect(await semverSatisfies("2.x", "2.10.1")).toBe(true);
+	});
+	it("2.x should not satisfy version 3.0.0", async () => {
+		expect(await semverSatisfies("2.x", "3.0.0")).toBe(false);
+	});
+	it("simple star * should satisfy any version, e.g. 10.11.12", async () => {
+		expect(await semverSatisfies("*", "10.11.12")).toBe(true);
+	});
+	it("simple star * should satisfy any version, e.g. 0.0.1", async () => {
+		expect(await semverSatisfies("*", "0.0.1")).toBe(true);
+	});
+	it("2.x.x should satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("2.x.x", "2.0.0")).toBe(true);
+	});
+	it("2.x.x should satisfy version 2.9.9", async () => {
+		expect(await semverSatisfies("2.x.x", "2.9.9")).toBe(true);
+	});
+	it("2.x.x should not satisfy version 3.0.0", async () => {
+		expect(await semverSatisfies("2.x.x", "3.0.0")).toBe(false);
+	});
+	it("0.x.x should satisfy version 0.1.0", async () => {
+		expect(await semverSatisfies("0.x.x", "0.1.0")).toBe(true);
+	});
+	it("0.x.x should satisfy version 0.9.9", async () => {
+		expect(await semverSatisfies("0.x.x", "0.9.9")).toBe(true);
+	});
+	it("0.x.x should not satisfy version 1.0.0", async () => {
+		expect(await semverSatisfies("0.x.x", "1.0.0")).toBe(false);
+	});
+	it("range 1.2.3 - 2.0.0 should satisfy version 1.2.4", async () => {
+		expect(await semverSatisfies("1.2.3 - 2.0.0", "1.2.4")).toBe(true);
+	});
+	it("range 1.2.3 - 2.0.0 should satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies("1.2.3 - 2.0.0", "2.0.0")).toBe(true);
+	});
+	it("range 1.2.3 - 2.0.0 should satisfy version 1.5.0", async () => {
+		expect(await semverSatisfies("1.2.3 - 2.0.0", "1.5.0")).toBe(true);
+	});
+	it("range 1.2.3 - 2.0.0 should not satisfy version 2.0.1", async () => {
+		expect(await semverSatisfies("1.2.3 - 2.0.0", "2.0.1")).toBe(false);
+	});
+	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.3", async () => {
+		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.3")).toBe(true);
+	});
+	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.0", async () => {
+		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.0")).toBe(true);
+	});
+	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.4", async () => {
+		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.4")).toBe(true);
+	});
+	it("range >= 5.7.0 <= 5.7.4 should not satisfy version 5.6.9", async () => {
+		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.6.9")).toBe(false);
+	});
+	it("range >= 5.7.0 <= 5.7.4 should not satisfy version 5.7.5", async () => {
+		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.5")).toBe(false);
+	});
+	it("range >=5.7.0 <=5.7.4 (no spaces around operators) should satisfy version 5.7.3", async () => {
+		expect(await semverSatisfies(">=5.7.0 <=5.7.4", "5.7.3")).toBe(true);
+	});
+	it("range >=  5.7.0  <=  5.7.4 (multiple spaces) should satisfy version 5.7.3", async () => {
+		expect(await semverSatisfies(">=  5.7.0  <=  5.7.4", "5.7.3")).toBe(true);
+	});
+	it("range >= 1.0.0 <= 2.0.0 should satisfy version 1.5.0", async () => {
+		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "1.5.0")).toBe(true);
+	});
+	it("range >= 1.0.0 <= 2.0.0 should satisfy version 1.0.0", async () => {
+		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "1.0.0")).toBe(true);
+	});
+	it("range >= 1.0.0 <= 2.0.0 should satisfy version 2.0.0", async () => {
+		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "2.0.0")).toBe(true);
+	});
+	it("range >= 1.0.0 <= 2.0.0 should not satisfy version 0.9.9", async () => {
+		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "0.9.9")).toBe(false);
+	});
+	it("range >= 1.0.0 <= 2.0.0 should not satisfy version 2.0.1", async () => {
+		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "2.0.1")).toBe(false);
+	});
+};
+//#endregion
+//#region src/databaseTestRunner.ts
+var DatabaseUnavailableError = class extends Error {
+	constructor() {
+		super("The database is unavailable outside the test lifecycle");
+		this.name = "DatabaseUnavailableError";
+	}
+};
+const setupDatabaseTestRunner = (lifecycle, registerTests) => {
+	describe(lifecycle.name, () => {
+		let database;
+		const getDatabase = () => {
+			if (database === void 0) throw new DatabaseUnavailableError();
+			return database;
+		};
+		beforeAll(async () => {
+			await lifecycle.migrate();
+			database = await lifecycle.createDatabase();
 		});
-		it("keeps all concurrent events and the greatest timestamp/ID state, including logout", async () => {
-			const model = state.getDatabase();
-			const older = {
-				...createBundleEventRowFixture("912", 100),
-				install_id: "concurrent",
-				user_id: "previous"
-			};
-			const tied = {
-				...createBundleEventRowFixture("910", 200),
-				install_id: "concurrent",
-				user_id: "previous"
-			};
-			const newest = {
-				...createBundleEventRowFixture("911", 200),
-				install_id: "concurrent",
-				user_id: null
-			};
-			await Promise.all([
-				record(model, newest),
-				record(model, older),
-				record(model, tied)
-			]);
-			await record(model, older);
-			await expect(model.findLatestEvents({ installId: "concurrent" })).resolves.toEqual([newest]);
-			await expect(model.findLatestEvents({
-				userId: "previous",
-				limit: 10
-			})).resolves.toEqual([]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 201,
-				limit: 10
-			}), [
-				newest,
-				tied,
-				older
-			]);
+		beforeEach(async () => {
+			await lifecycle.reset(getDatabase());
 		});
-		it("rejects invalid event metadata before persisting a report", async () => {
-			const model = state.getDatabase();
-			const event = createBundleEventRowFixture("920", 100);
-			await expect(model.recordEvent({ event: {
-				...event,
-				metadata: {
-					...event.metadata,
-					cohort: 123
-				}
-			} })).rejects.toMatchObject({ code: "invalid-data" });
-			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([]);
-			await expect(model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 200,
-				limit: 10
-			})).resolves.toEqual([]);
+		afterAll(async () => {
+			await lifecycle.dispose(getDatabase());
+			database = void 0;
 		});
-		it("shares scoped list/count predicates, recovery attribution, and half-open time bounds", async () => {
-			const model = state.getDatabase();
-			const bundleA = createBundleEventRowFixture("1", 0).to_bundle_id;
-			const bundleB = createBundleEventRowFixture("2", 0).to_bundle_id;
-			const bundleC = createBundleEventRowFixture("3", 0).to_bundle_id;
-			const applied = {
-				...createBundleEventRowFixture("930", 100),
-				install_id: "target",
-				to_bundle_id: bundleB
-			};
-			const recovered = {
-				...createBundleEventRowFixture("931", 120),
-				install_id: "target",
-				type: "RECOVERED",
-				from_bundle_id: bundleB,
-				to_bundle_id: bundleA,
-				metadata: {
-					...createBundleEventRowFixture("931", 120).metadata,
-					update_strategy: "appVersion"
-				}
-			};
-			const unchanged = {
-				...createBundleEventRowFixture("932", 130),
-				type: "UNCHANGED",
-				from_bundle_id: null,
-				to_bundle_id: bundleB,
-				metadata: {
-					...createBundleEventRowFixture("932", 130).metadata,
-					update_strategy: null
-				}
-			};
-			const excluded = [
-				{
-					...applied,
-					id: createBundleEventRowFixture("933", 99).id,
-					install_id: "before",
-					received_at_ms: 99
-				},
-				{
-					...applied,
-					id: createBundleEventRowFixture("934", 200).id,
-					install_id: "after",
-					received_at_ms: 200
-				},
-				{
-					...applied,
-					id: createBundleEventRowFixture("935", 110).id,
-					install_id: "android",
-					platform: "android"
-				},
-				{
-					...applied,
-					id: createBundleEventRowFixture("936", 110).id,
-					install_id: "preview",
-					channel: "preview"
-				},
-				{
-					...recovered,
-					id: createBundleEventRowFixture("937", 125).id,
-					install_id: "other-source",
-					from_bundle_id: bundleC,
-					to_bundle_id: bundleB
-				}
-			];
-			for (const row of [
-				applied,
-				recovered,
-				unchanged,
-				...excluded
-			]) await record(model, row);
-			await expect(async () => record(model, {
-				...applied,
-				type: "RELEASE_ADOPTED"
-			})).rejects.toThrow();
-			await expect(async () => record(model, {
-				...applied,
-				type: "UNCHANGED",
-				from_bundle_id: bundleB,
-				metadata: {
-					...applied.metadata,
-					update_strategy: "appVersion"
-				}
-			})).rejects.toThrow();
-			await expect(model.findLatestEvents({ installId: "target" })).resolves.toEqual([recovered]);
-			const cases = [
-				[{
-					platform: "ios",
-					channel: "production",
-					type: "UPDATE_APPLIED",
-					toBundleId: bundleB
-				}, applied],
-				[{
-					platform: "ios",
-					channel: "production",
-					type: "RECOVERED",
-					fromBundleId: bundleB
-				}, recovered],
-				[{
-					platform: "ios",
-					channel: "production",
-					type: "UNCHANGED",
-					toBundleId: bundleB
-				}, unchanged]
-			];
-			for (const [filter, expected] of cases) {
-				await expectInsightsIndex(() => model.countEvents({
-					filter,
-					sinceMs: 100,
-					beforeReceivedAtMs: 200
-				}), 1);
-				await expectInsightsIndex(() => model.listEvents({
-					filter: {
-						kind: "bundle",
-						...filter
-					},
-					sinceMs: 100,
-					beforeReceivedAtMs: 200,
-					limit: 1
-				}), [expected]);
+		registerTests({ getDatabase });
+	});
+};
+//#endregion
+//#region src/releaseCatalogHttpFixtures.ts
+const releaseCatalogDownloadUrl = (uri) => `https://storage.example.com/${encodeURIComponent(uri)}`;
+const targetId = createBundleRowFixture("302").id;
+const RELEASE_CATALOG_MANIFEST_URIS = {
+	small: `storage://test-bucket/small/bundles/${targetId}/manifest.json`,
+	large: `storage://test-bucket/large/bundles/${targetId}/manifest.json`
+};
+const RELEASE_CATALOG_DOWNLOAD_HASH = "a".repeat(64);
+const manifestAssets = { "index.ios.bundle": {
+	fileHash: "target-hbc-hash",
+	downloadFileHash: RELEASE_CATALOG_DOWNLOAD_HASH,
+	downloadByteSize: 1e3
+} };
+const releaseCatalogArtifact = (bundle) => ({
+	artifactProtocolVersion: 1,
+	manifestUrl: releaseCatalogDownloadUrl(bundle.manifest_storage_uri),
+	manifestFileHash: bundle.manifest_file_hash,
+	assets: { "index.ios.bundle": {
+		fileHash: "target-hbc-hash",
+		file: {
+			compression: "br",
+			url: releaseCatalogDownloadUrl(`${bundle.asset_base_storage_uri}/sha256/aa/${RELEASE_CATALOG_DOWNLOAD_HASH}.br`)
+		}
+	} }
+});
+/** Install these storage objects in the test server, independently of its DB. */
+const RELEASE_CATALOG_STORAGE_FIXTURES = Object.fromEntries(Object.entries(RELEASE_CATALOG_MANIFEST_URIS).map(([size, uri]) => [uri, JSON.stringify({
+	bundleId: targetId,
+	assets: manifestAssets,
+	archive: {
+		downloadFileHash: "b".repeat(64),
+		downloadByteSize: size === "small" ? 1 : 1e4,
+		tarByteSize: 2e4
+	}
+})]));
+/** Storage boundary shared by provider and separately spawned server tests. */
+const createReleaseCatalogTestStorage = () => ({
+	name: "catalog-test-storage",
+	protocol: "storage",
+	async get({ storageUri }) {
+		const suffix = /^storage:\/\/bundles\/([^/]+)\/manifest\.json$/.exec(storageUri)?.[1];
+		const body = RELEASE_CATALOG_STORAGE_FIXTURES[storageUri] ?? (suffix === void 0 ? void 0 : JSON.stringify({
+			bundleId: createBundleRowFixture(suffix).id,
+			assets: manifestAssets
+		}));
+		return { response: body === void 0 ? null : new Response(body) };
+	},
+	async getDownloadUrl({ storageUri }) {
+		return { url: releaseCatalogDownloadUrl(storageUri) };
+	}
+});
+//#endregion
+//#region src/releaseCatalogLifecycleTests.ts
+function setupReleaseCatalogLifecycleTests(options) {
+	const device = (minimumReleaseId = NIL_UUID) => ({
+		builtInBundleId: minimumReleaseId,
+		currentBundleId: minimumReleaseId,
+		activeReleaseId: null,
+		minimumReleaseId,
+		cohort: "1",
+		crashedBundleIds: []
+	});
+	const refresh = async (previous) => {
+		let next = previous;
+		await expect.poll(async () => {
+			next = await options.readCatalog();
+			return next.generation;
+		}, {
+			interval: 100,
+			timeout: 1e4
+		}).toBeGreaterThan(previous.generation);
+		expect(next.catalogId).toBe(previous.catalogId);
+		expect(next.catalogHash).not.toBe(previous.catalogHash);
+		return next;
+	};
+	const install = async (catalog, app, target, status) => {
+		const desired = selectDesiredRelease(catalog, app);
+		expect(desired).toMatchObject({
+			kind: "BUNDLE",
+			releaseId: target.release.id,
+			bundleId: target.bundle.id,
+			status,
+			release: {
+				message: target.release.message,
+				shouldForceUpdate: target.release.should_force_update
 			}
-			await expectInsightsIndex(() => model.countLatestEvents({
-				platform: "ios",
-				channel: "production",
-				sinceMs: 100,
-				bundle: [{
-					field: "to_bundle_id",
-					value: bundleA,
-					types: [
-						"UNCHANGED",
-						"UPDATE_APPLIED",
-						"RECOVERED"
-					]
-				}]
-			}), 1);
-			await expectInsightsIndex(() => model.countLatestEvents({
-				platform: "ios",
-				channel: "production",
-				sinceMs: 100
-			}), 4);
 		});
-		it("uses exact identity and UTF-8 cursor order for user installations", async () => {
-			const model = state.getDatabase();
-			const ids = [
-				"Install-a",
-				"é",
-				"install-a",
-				"install-a ",
-				"é",
-				"",
-				"😀"
-			];
-			const events = ids.map((install_id, index) => ({
-				...createBundleEventRowFixture(String(950 + index), 100),
-				install_id,
-				user_id: "User-é"
-			}));
-			for (const event of events.toReversed()) await record(model, event);
-			const spacedUser = {
-				...createBundleEventRowFixture("960", 100),
-				install_id: "spaced-user-install",
-				user_id: "User-é "
-			};
-			await record(model, spacedUser);
-			await expectInsightsIndex(async () => {
-				const found = [];
-				let afterInstallId;
-				for (let pageIndex = 0; pageIndex <= ids.length; pageIndex++) {
-					const page = await model.findLatestEvents({
-						userId: "User-é",
-						afterInstallId,
-						limit: 2
-					});
-					found.push(...page.map((row) => row.install_id));
-					if (page.length < 2) return found;
-					const nextCursor = page[page.length - 1].install_id;
-					expect(nextCursor, "Insights cursor must advance").not.toBe(afterInstallId);
-					afterInstallId = nextCursor;
-				}
-				throw new Error("Insights pagination did not terminate");
-			}, ids);
-			await expectInsightsIndex(() => model.findLatestEvents({
-				userId: "User-é ",
-				limit: 10
-			}), [spacedUser]);
-			await expect(model.findLatestEvents({
-				userId: "user-é",
-				limit: 10
-			})).resolves.toEqual([]);
-			await expect(model.findLatestEvents({ installId: "INSTALL-a" })).resolves.toEqual([]);
-			await expect(model.findLatestEvents({ installId: "Install-a" })).resolves.toEqual([events[0]]);
-			await expect(model.findLatestEvents({ installId: "install-a " })).resolves.toEqual([events[3]]);
-			await expect(model.findLatestEvents({ installId: "install-a" })).resolves.toEqual([events[2]]);
-		});
-		it("counts overlapping bundle predicates once per latest installation", async () => {
-			const model = state.getDatabase();
-			const event = createBundleEventRowFixture("9700", 100);
-			await record(model, event);
-			const predicate = {
-				field: "to_bundle_id",
-				value: event.to_bundle_id,
-				types: [event.type]
-			};
-			await expectInsightsIndex(() => model.countLatestEvents({
-				platform: event.platform,
-				channel: event.channel,
-				sinceMs: 0,
-				bundle: [predicate, predicate]
-			}), 1);
+		const response = await options.request(`/artifacts/v1/${desired.bundleId}/from/${app.currentBundleId}`);
+		expect(response.status).toBe(200);
+		expect(await response.json()).toEqual(releaseCatalogArtifact(target.bundle));
+		app.currentBundleId = desired.bundleId;
+		app.activeReleaseId = desired.releaseId;
+	};
+	const useBuiltin = (catalog, app) => {
+		expect(selectDesiredRelease(catalog, app)).toEqual({
+			kind: "BUILTIN",
+			releaseId: null,
+			bundleId: app.builtInBundleId,
+			release: null,
+			status: "ROLLBACK"
 		});
-		it("counts a latest installation once when a from and a to predicate both match it", async () => {
-			const model = state.getDatabase();
-			const moved = createBundleEventRowFixture("9701", 100);
-			await record(model, moved);
-			await expectInsightsIndex(() => model.countLatestEvents({
-				platform: moved.platform,
-				channel: moved.channel,
-				sinceMs: 0,
-				bundle: [{
-					field: "from_bundle_id",
-					value: moved.from_bundle_id,
-					types: [moved.type]
-				}, {
-					field: "to_bundle_id",
-					value: moved.to_bundle_id,
-					types: [moved.type]
-				}]
-			}), 1);
+		app.currentBundleId = app.builtInBundleId;
+		app.activeReleaseId = null;
+	};
+	const staysOn = (catalog, app) => {
+		expect(selectDesiredRelease(catalog, app)).toMatchObject({
+			bundleId: app.currentBundleId,
+			releaseId: app.activeReleaseId
 		});
-		it("returns zero for successful empty scalar queries", async () => {
-			const model = state.getDatabase();
-			await expect(model.countLatestEvents({
-				platform: "ios",
-				channel: "production",
-				sinceMs: 0
-			})).resolves.toBe(0);
-			await expect(model.countEvents({
-				filter: {
-					platform: "ios",
-					channel: "production",
-					type: "RECOVERED",
-					fromBundleId: createBundleEventRowFixture("1", 0).to_bundle_id
-				},
-				sinceMs: 0,
-				beforeReceivedAtMs: 100
-			})).resolves.toBe(0);
+	};
+	describe("OTA lifecycle through HTTP and the client selector", () => {
+		it("runs built-in → OTA A → OTA B → rollback A → built-in after policy changes", async () => {
+			const app = device();
+			const first = await options.publish("801");
+			const second = await options.publish("802", {
+				enabled: false,
+				should_force_update: true
+			});
+			let catalog = await options.readCatalog();
+			await install(catalog, app, first, "UPDATE");
+			staysOn(catalog, app);
+			await options.update(second.release.id, { enabled: true });
+			catalog = await refresh(catalog);
+			await install(catalog, app, second, "UPDATE");
+			staysOn(catalog, app);
+			await options.update(second.release.id, { enabled: false });
+			catalog = await refresh(catalog);
+			await install(catalog, app, first, "ROLLBACK");
+			staysOn(catalog, app);
+			await options.update(first.release.id, { enabled: false });
+			catalog = await refresh(catalog);
+			useBuiltin(catalog, app);
+			staysOn(catalog, app);
+		}, 4e4);
+		it("rolls a deleted active Release back to older OTA bytes, then to built-in", async () => {
+			const app = device();
+			const first = await options.publish("811");
+			const second = await options.publish("812");
+			let catalog = await options.readCatalog();
+			await install(catalog, app, second, "UPDATE");
+			await options.remove(second.release.id);
+			catalog = await refresh(catalog);
+			await install(catalog, app, first, "ROLLBACK");
+			await options.remove(first.release.id);
+			catalog = await refresh(catalog);
+			useBuiltin(catalog, app);
+			staysOn(catalog, app);
+		}, 3e4);
+		it("respects the native minimum on fresh install and rollback with or without a Release receipt", async () => {
+			await options.publish("821");
+			const current = await options.publish("823", { enabled: false });
+			const app = device(createBundleRowFixture("822").id);
+			const catalog = await options.readCatalog();
+			useBuiltin(catalog, app);
+			for (const activeReleaseId of [current.release.id, null]) {
+				app.currentBundleId = current.bundle.id;
+				app.activeReleaseId = activeReleaseId;
+				useBuiltin(catalog, app);
+			}
+			expect(selectDesiredRelease(catalog, {
+				...device(current.bundle.id),
+				activeReleaseId: current.release.id
+			})).toBeNull();
 		});
-		it("maintains idempotent release, scope, usage, and latest-distribution summaries", async () => {
-			const model = state.getDatabase();
-			const releaseA = "00000000-0000-7000-8000-000000008001";
-			const releaseB = "00000000-0000-7000-8000-000000008002";
-			const download = {
-				...createBundleEventRowFixture("9801", 1e3),
-				type: "UPDATE_DOWNLOADED",
-				install_id: "summary-install-a",
-				from_release_id: releaseA,
-				to_release_id: releaseB
-			};
-			const appliedA = {
-				...download,
-				id: createBundleEventRowFixture("9802", 2e3).id,
-				type: "UPDATE_APPLIED",
-				received_at_ms: 2e3
-			};
-			const appliedB = {
-				...appliedA,
-				id: createBundleEventRowFixture("9803", 2100).id,
-				install_id: "summary-install-b",
-				received_at_ms: 2100
-			};
-			const recovered = {
-				...appliedA,
-				id: createBundleEventRowFixture("9804", 3e3).id,
-				type: "RECOVERED",
-				from_release_id: releaseB,
-				to_release_id: releaseA,
-				received_at_ms: 3e3
+		it("re-evaluates cohort changes and rolls back even when the predecessor rollout is closed", async () => {
+			const app = {
+				...device(),
+				cohort: "staff"
 			};
-			for (const event of [
-				download,
-				appliedA,
-				appliedB,
-				appliedB,
-				recovered
-			]) await record(model, event);
-			const releases = [{
-				releaseId: releaseA,
-				platform: "ios",
-				channel: "production"
-			}, {
-				releaseId: releaseB,
-				platform: "ios",
-				channel: "production"
-			}];
-			const lifetime = await model.getReleaseActivity({ releases });
-			expect(lifetime.data.map(({ metrics }) => metrics)).toEqual([{
-				downloads: 0,
-				launches: 1,
-				failedLaunches: 0
-			}, {
-				downloads: 1,
-				launches: 2,
-				failedLaunches: 1
-			}]);
-			const scope = await model.getReleaseActivity({
-				scope: {
-					platform: "ios",
-					channel: "production"
-				},
-				timeRange: {
-					start: 0,
-					end: 36e5
-				}
-			});
-			expect(scope.data[0]?.metrics).toMatchObject({
-				downloads: 1,
-				launches: 3,
-				failedLaunches: 1,
-				uniqueUsers: 2
+			const first = await options.publish("831", {
+				rollout_cohort_count: 0,
+				target_cohorts: ["staff"]
 			});
-			const usage = await model.getAppUsage({
-				channel: "production",
-				platform: "all",
-				timeRange: {
-					start: 0,
-					end: 36e5
-				},
-				intervalMs: 36e5
+			const second = await options.publish("832", {
+				rollout_cohort_count: 0,
+				target_cohorts: ["staff"]
 			});
-			expect(usage.activeInstallations).toBe(2);
-			expect(usage.points).toEqual([{
-				startMs: 0,
-				installations: 2
-			}]);
-			expect(usage.bundleDistribution).toEqual(expect.arrayContaining([{
-				appVersion: "1.0.0",
-				platform: "ios",
-				releaseId: releaseA,
-				installations: 1
-			}, {
-				appVersion: "1.0.0",
-				platform: "ios",
-				releaseId: releaseB,
-				installations: 1
-			}]));
-		});
-		it("pages insights events newest first with a stable cursor", async () => {
-			const model = state.getDatabase();
-			const first = createBundleEventRowFixture("701", 100);
-			const second = createBundleEventRowFixture("702", 100);
-			const third = createBundleEventRowFixture("703", 200);
-			await model.recordEvent({ event: third });
-			await model.recordEvent({ event: second });
-			await model.recordEvent({ event: first });
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 201,
-				limit: 2
-			}), [third, second]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				after: {
-					receivedAtMs: second.received_at_ms,
-					id: second.id
-				},
-				beforeReceivedAtMs: 201,
-				limit: 2
-			}), [first]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: { kind: "all" },
-				beforeReceivedAtMs: 200,
-				limit: 10
-			}), [second, first]);
+			const catalog = await options.readCatalog();
+			await install(catalog, app, second, "UPDATE");
+			app.cohort = "1";
+			await install(catalog, app, first, "ROLLBACK");
+			useBuiltin(catalog, app);
+			staysOn(catalog, app);
 		});
-		it("filters installation movements before applying the page limit", async () => {
-			const model = state.getDatabase();
-			const unchanged = {
-				...createBundleEventRowFixture("711", 300),
-				type: "UNCHANGED",
-				install_id: "install-target",
-				from_bundle_id: null,
-				metadata: {
-					...createBundleEventRowFixture("711", 300).metadata,
-					update_strategy: null
-				}
-			};
-			const unrelated = createMovementEvent("712", 250, "UPDATE_APPLIED", "install-other");
-			const applied = createMovementEvent("713", 200, "UPDATE_APPLIED", "install-target");
-			const recovered = createMovementEvent("714", 100, "RECOVERED", "install-target");
-			for (const row of [
-				unchanged,
-				unrelated,
-				applied,
-				recovered
-			]) await model.recordEvent({ event: row });
-			await expectInsightsIndex(() => model.listEvents({
-				filter: {
-					kind: "installationMovement",
-					installId: "install-target"
-				},
-				beforeReceivedAtMs: 301,
-				limit: 1
-			}), [applied]);
-			await expectInsightsIndex(() => model.listEvents({
-				filter: {
-					kind: "installationMovement",
-					installId: "install-target"
-				},
-				after: {
-					receivedAtMs: applied.received_at_ms,
-					id: applied.id
-				},
-				beforeReceivedAtMs: 301,
-				limit: 1
-			}), [recovered]);
+		it("does not reinstall crashed OTAs after native recovery to a previous OTA or built-in", async () => {
+			const app = device();
+			const first = await options.publish("841");
+			const second = await options.publish("842", { enabled: false });
+			let catalog = await options.readCatalog();
+			await install(catalog, app, first, "UPDATE");
+			await options.update(second.release.id, { enabled: true });
+			catalog = await refresh(catalog);
+			await install(catalog, app, second, "UPDATE");
+			app.currentBundleId = first.bundle.id;
+			app.activeReleaseId = first.release.id;
+			app.crashedBundleIds = [second.bundle.id];
+			staysOn(catalog, app);
+			app.currentBundleId = app.builtInBundleId;
+			app.activeReleaseId = null;
+			app.crashedBundleIds = [first.bundle.id, second.bundle.id];
+			useBuiltin(catalog, app);
+			staysOn(catalog, app);
+			const fixed = await options.publish("843");
+			catalog = await refresh(catalog);
+			await install(catalog, app, fixed, "UPDATE");
+			staysOn(catalog, app);
+		}, 25e3);
+		it("selects a compatible OTA and stays on it despite a newer incompatible Release", async () => {
+			const app = device();
+			const compatible = await options.publish("851");
+			await options.publishIncompatible("852");
+			const catalog = await options.readCatalog();
+			await install(catalog, app, compatible, "UPDATE");
+			staysOn(catalog, app);
 		});
 	});
-};
-//#endregion
-//#region src/setupInsightsModelTestSuite.ts
-/**
-* The Insights report contract on one database: pass the Insights plugin's
-* model over it, `createInsightsModel(createDatabasePluginApis(database,
-* [insights()]).insights)`, as `createDatabase`.
-*/
-const setupInsightsModelTestSuite = (lifecycle) => setupDatabaseTestRunner(lifecycle, registerInsightsModelTests);
+}
 //#endregion
-//#region src/setupSemverSatisfiesTestSuite.ts
+//#region src/setupReleaseCatalogTestSuite.ts
+const NIL_UUID$1 = "00000000-0000-0000-0000-000000000000";
+const FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
+const channelKey = (channel) => btoa(String.fromCharCode(...new TextEncoder().encode(channel))).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 /**
-*
-* Filters based on semver. And sorts by the highest bundle version.
-*
-* * Range Expression Table:
-*
-* | Range Expression | Who gets the update                                                    |
-* |------------------|------------------------------------------------------------------------|
-* | 1.2.3            | Only devices running the specific binary app store version 1.2.3 of your app |
-* | *                | Any device configured to consume updates from your CodePush app         |
-* | 1.2.x            | Devices running major version 1, minor version 2 and any patch version of your app |
-* | 1.2.3 - 1.2.7    | Devices running any binary version between 1.2.3 (inclusive) and 1.2.7 (inclusive) |
-* | >=1.2.3 <1.2.7   | Devices running any binary version between 1.2.3 (inclusive) and 1.2.7 (exclusive) |
-* | 1.2              | Equivalent to >=1.2.0 <1.3.0                                            |
-* | ~1.2.3           | Equivalent to >=1.2.3 <1.3.0                                            |
-* | ^1.2.3           | Equivalent to >=1.2.3 <2.0.0                                            |
+* Server conformance through HTTP only, on admin API protocol 2. The caller
+* owns server, database, and storage setup. Releases are written with
+* `POST /releases` and changed with `PATCH /releases/:id`; lifecycle scenarios
+* feed HTTP catalogs to the production client selector. Each test deletes
+* what it wrote, so a long-lived server can run the suite again.
 */
-const setupSemverSatisfiesTestSuite = ({ semverSatisfies }) => {
-	it("version 1.2.3 should satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("1.2.3", "1.2.3")).toBe(true);
-	});
-	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
-	});
-	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
-	});
-	it("version 1.2.4 should not satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("1.2.3", "1.2.4")).toBe(false);
-	});
-	it("1.x.x should satisfy version 1.0", async () => {
-		expect(await semverSatisfies("1.x.x", "1.0")).toBe(true);
-	});
-	it("1.x.x should satisfy version 1.12", async () => {
-		expect(await semverSatisfies("1.x.x", "1.12")).toBe(true);
-	});
-	it("1.x.x should satisfy version 1.0.0", async () => {
-		expect(await semverSatisfies("1.x.x", "1.0.0")).toBe(true);
-	});
-	it("1.x.x should satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("1.x.x", "1.2.3")).toBe(true);
-	});
-	it("1.x.x should not satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("1.x.x", "2.0.0")).toBe(false);
-	});
-	it("1.x.x should not satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("1.x.x", "2.0.0")).toBe(false);
-	});
-	it("1.2.x should satisfy version 1.2.5", async () => {
-		expect(await semverSatisfies("1.2.x", "1.2.5")).toBe(true);
-	});
-	it("1.2.x should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("1.2.x", "1.3.0")).toBe(false);
-	});
-	it("1.2.x should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("1.2.x", "1.3.0")).toBe(false);
-	});
-	it("range 1.2.3-1.2.7 should satisfy version 1.2.5", async () => {
-		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.2.5")).toBe(true);
-	});
-	it("range 1.2.3-1.2.7 should satisfy version 1.2.5", async () => {
-		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.2.5")).toBe(true);
-	});
-	it("range 1.2.3-1.2.7 should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("1.2.3 - 1.2.7", "1.3.0")).toBe(false);
-	});
-	it("range >=1.2.3 <1.2.7 should satisfy version 1.2.5", async () => {
-		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.5")).toBe(true);
-	});
-	it("range >=1.2.3 <1.2.7 should satisfy version 1.2.5", async () => {
-		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.5")).toBe(true);
-	});
-	it("range >=1.2.3 <1.2.7 should not satisfy version 1.2.7", async () => {
-		expect(await semverSatisfies(">=1.2.3 <1.2.7", "1.2.7")).toBe(false);
-	});
-	it("~1.2.3 should satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.2.3")).toBe(true);
-	});
-	it("~1.2.3 should satisfy version 1.2.4", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.2.4")).toBe(true);
-	});
-	it("~1.2.3 should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.3.0")).toBe(false);
-	});
-	it("~1.2.3 should satisfy version 1.2.3", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.2.3")).toBe(true);
-	});
-	it("~1.2.3 should satisfy version 1.2.4", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.2.4")).toBe(true);
-	});
-	it("~1.2.3 should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("~1.2.3", "1.3.0")).toBe(false);
-	});
-	it("^1.2.3 should satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("^1.2.3", "1.3.0")).toBe(true);
-	});
-	it("^1.2.3 should satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("^1.2.3", "1.3.0")).toBe(true);
-	});
-	it("^1.2.3 should not satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("^1.2.3", "2.0.0")).toBe(false);
-	});
-	it("version 1.2 should satisfy version 1.2.0 (equivalent to >=1.2.0 <1.3.0)", async () => {
-		expect(await semverSatisfies("1.2", "1.2.0")).toBe(true);
-	});
-	it("version 1.2 should satisfy version 1.2.99 (equivalent to >=1.2.0 <1.3.0)", async () => {
-		expect(await semverSatisfies("1.2", "1.2.99")).toBe(true);
-	});
-	it("version 1.2 should not satisfy version 1.3.0", async () => {
-		expect(await semverSatisfies("1.2", "1.3.0")).toBe(false);
-	});
-	it("single-major '1' should satisfy version 1.0.0 (equivalent to >=1.0.0 <2.0.0)", async () => {
-		expect(await semverSatisfies("1", "1.0.0")).toBe(true);
-	});
-	it("single-major '1' should satisfy version 1.99.99", async () => {
-		expect(await semverSatisfies("1", "1.99.99")).toBe(true);
-	});
-	it("single-major '1' should not satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("1", "2.0.0")).toBe(false);
-	});
-	it("0.x.x should satisfy version 0.5.10", async () => {
-		expect(await semverSatisfies("0.x.x", "0.5.10")).toBe(true);
-	});
-	it("0.x.x should not satisfy version 1.0.0", async () => {
-		expect(await semverSatisfies("0.x.x", "1.0.0")).toBe(false);
-	});
-	it("2.x should satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("2.x", "2.0.0")).toBe(true);
-	});
-	it("2.x should satisfy version 2.10.1", async () => {
-		expect(await semverSatisfies("2.x", "2.10.1")).toBe(true);
-	});
-	it("2.x should not satisfy version 3.0.0", async () => {
-		expect(await semverSatisfies("2.x", "3.0.0")).toBe(false);
-	});
-	it("simple star * should satisfy any version, e.g. 10.11.12", async () => {
-		expect(await semverSatisfies("*", "10.11.12")).toBe(true);
-	});
-	it("simple star * should satisfy any version, e.g. 0.0.1", async () => {
-		expect(await semverSatisfies("*", "0.0.1")).toBe(true);
-	});
-	it("2.x.x should satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("2.x.x", "2.0.0")).toBe(true);
-	});
-	it("2.x.x should satisfy version 2.9.9", async () => {
-		expect(await semverSatisfies("2.x.x", "2.9.9")).toBe(true);
-	});
-	it("2.x.x should not satisfy version 3.0.0", async () => {
-		expect(await semverSatisfies("2.x.x", "3.0.0")).toBe(false);
-	});
-	it("0.x.x should satisfy version 0.1.0", async () => {
-		expect(await semverSatisfies("0.x.x", "0.1.0")).toBe(true);
-	});
-	it("0.x.x should satisfy version 0.9.9", async () => {
-		expect(await semverSatisfies("0.x.x", "0.9.9")).toBe(true);
-	});
-	it("0.x.x should not satisfy version 1.0.0", async () => {
-		expect(await semverSatisfies("0.x.x", "1.0.0")).toBe(false);
-	});
-	it("range 1.2.3 - 2.0.0 should satisfy version 1.2.4", async () => {
-		expect(await semverSatisfies("1.2.3 - 2.0.0", "1.2.4")).toBe(true);
-	});
-	it("range 1.2.3 - 2.0.0 should satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies("1.2.3 - 2.0.0", "2.0.0")).toBe(true);
-	});
-	it("range 1.2.3 - 2.0.0 should satisfy version 1.5.0", async () => {
-		expect(await semverSatisfies("1.2.3 - 2.0.0", "1.5.0")).toBe(true);
-	});
-	it("range 1.2.3 - 2.0.0 should not satisfy version 2.0.1", async () => {
-		expect(await semverSatisfies("1.2.3 - 2.0.0", "2.0.1")).toBe(false);
-	});
-	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.3", async () => {
-		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.3")).toBe(true);
-	});
-	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.0", async () => {
-		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.0")).toBe(true);
-	});
-	it("range >= 5.7.0 <= 5.7.4 should satisfy version 5.7.4", async () => {
-		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.4")).toBe(true);
-	});
-	it("range >= 5.7.0 <= 5.7.4 should not satisfy version 5.6.9", async () => {
-		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.6.9")).toBe(false);
-	});
-	it("range >= 5.7.0 <= 5.7.4 should not satisfy version 5.7.5", async () => {
-		expect(await semverSatisfies(">= 5.7.0 <= 5.7.4", "5.7.5")).toBe(false);
-	});
-	it("range >=5.7.0 <=5.7.4 (no spaces around operators) should satisfy version 5.7.3", async () => {
-		expect(await semverSatisfies(">=5.7.0 <=5.7.4", "5.7.3")).toBe(true);
-	});
-	it("range >=  5.7.0  <=  5.7.4 (multiple spaces) should satisfy version 5.7.3", async () => {
-		expect(await semverSatisfies(">=  5.7.0  <=  5.7.4", "5.7.3")).toBe(true);
-	});
-	it("range >= 1.0.0 <= 2.0.0 should satisfy version 1.5.0", async () => {
-		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "1.5.0")).toBe(true);
-	});
-	it("range >= 1.0.0 <= 2.0.0 should satisfy version 1.0.0", async () => {
-		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "1.0.0")).toBe(true);
-	});
-	it("range >= 1.0.0 <= 2.0.0 should satisfy version 2.0.0", async () => {
-		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "2.0.0")).toBe(true);
-	});
-	it("range >= 1.0.0 <= 2.0.0 should not satisfy version 0.9.9", async () => {
-		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "0.9.9")).toBe(false);
-	});
-	it("range >= 1.0.0 <= 2.0.0 should not satisfy version 2.0.1", async () => {
-		expect(await semverSatisfies(">= 1.0.0 <= 2.0.0", "2.0.1")).toBe(false);
-	});
-};
-//#endregion
-//#region src/releaseCatalogHttpFixtures.ts
-const releaseCatalogDownloadUrl = (uri) => `https://storage.example.com/${encodeURIComponent(uri)}`;
-const targetId = createBundleRowFixture("302").id;
-const RELEASE_CATALOG_MANIFEST_URIS = {
-	small: `storage://test-bucket/small/bundles/${targetId}/manifest.json`,
-	large: `storage://test-bucket/large/bundles/${targetId}/manifest.json`
-};
-const RELEASE_CATALOG_DOWNLOAD_HASH = "a".repeat(64);
-const manifestAssets = { "index.ios.bundle": {
-	fileHash: "target-hbc-hash",
-	downloadFileHash: RELEASE_CATALOG_DOWNLOAD_HASH,
-	downloadByteSize: 1e3
-} };
-const releaseCatalogArtifact = (bundle) => ({
-	artifactProtocolVersion: 1,
-	manifestUrl: releaseCatalogDownloadUrl(bundle.manifest_storage_uri),
-	manifestFileHash: bundle.manifest_file_hash,
-	assets: { "index.ios.bundle": {
-		fileHash: "target-hbc-hash",
-		file: {
-			compression: "br",
-			url: releaseCatalogDownloadUrl(`${bundle.asset_base_storage_uri}/sha256/aa/${RELEASE_CATALOG_DOWNLOAD_HASH}.br`)
-		}
-	} }
-});
-/** Install these storage objects in the test server, independently of its DB. */
-const RELEASE_CATALOG_STORAGE_FIXTURES = Object.fromEntries(Object.entries(RELEASE_CATALOG_MANIFEST_URIS).map(([size, uri]) => [uri, JSON.stringify({
-	bundleId: targetId,
-	assets: manifestAssets,
-	archive: {
-		downloadFileHash: "b".repeat(64),
-		downloadByteSize: size === "small" ? 1 : 1e4,
-		tarByteSize: 2e4
-	}
-})]));
-/** Storage boundary shared by provider and separately spawned server tests. */
-const createReleaseCatalogTestStorage = () => ({
-	name: "catalog-test-storage",
-	protocol: "storage",
-	async get({ storageUri }) {
-		const suffix = /^storage:\/\/bundles\/([^/]+)\/manifest\.json$/.exec(storageUri)?.[1];
-		const body = RELEASE_CATALOG_STORAGE_FIXTURES[storageUri] ?? (suffix === void 0 ? void 0 : JSON.stringify({
-			bundleId: createBundleRowFixture(suffix).id,
-			assets: manifestAssets
-		}));
-		return { response: body === void 0 ? null : new Response(body) };
-	},
-	async getDownloadUrl({ storageUri }) {
-		return { url: releaseCatalogDownloadUrl(storageUri) };
-	}
-});
-//#endregion
-//#region src/releaseCatalogLifecycleTests.ts
-function setupReleaseCatalogLifecycleTests(options) {
-	const device = (minimumReleaseId = NIL_UUID) => ({
-		builtInBundleId: minimumReleaseId,
-		currentBundleId: minimumReleaseId,
-		activeReleaseId: null,
-		minimumReleaseId,
-		cohort: "1",
-		crashedBundleIds: []
-	});
-	const refresh = async (previous) => {
-		let next = previous;
-		await expect.poll(async () => {
-			next = await options.readCatalog();
-			return next.generation;
-		}, {
-			interval: 100,
-			timeout: 1e4
-		}).toBeGreaterThan(previous.generation);
-		expect(next.catalogId).toBe(previous.catalogId);
-		expect(next.catalogHash).not.toBe(previous.catalogHash);
-		return next;
-	};
-	const install = async (catalog, app, target, status) => {
-		const desired = selectDesiredRelease(catalog, app);
-		expect(desired).toMatchObject({
-			kind: "BUNDLE",
-			releaseId: target.release.id,
-			bundleId: target.bundle.id,
-			status,
-			release: {
-				message: target.release.message,
-				shouldForceUpdate: target.release.should_force_update
-			}
-		});
-		const response = await options.request(`/artifacts/v1/${desired.bundleId}/from/${app.currentBundleId}`);
-		expect(response.status).toBe(200);
-		expect(await response.json()).toEqual(releaseCatalogArtifact(target.bundle));
-		app.currentBundleId = desired.bundleId;
-		app.activeReleaseId = desired.releaseId;
-	};
-	const useBuiltin = (catalog, app) => {
-		expect(selectDesiredRelease(catalog, app)).toEqual({
-			kind: "BUILTIN",
-			releaseId: null,
-			bundleId: app.builtInBundleId,
-			release: null,
-			status: "ROLLBACK"
-		});
-		app.currentBundleId = app.builtInBundleId;
-		app.activeReleaseId = null;
-	};
-	const staysOn = (catalog, app) => {
-		expect(selectDesiredRelease(catalog, app)).toMatchObject({
-			bundleId: app.currentBundleId,
-			releaseId: app.activeReleaseId
-		});
-	};
-	describe("OTA lifecycle through HTTP and the client selector", () => {
-		it("runs built-in → OTA A → OTA B → rollback A → built-in after policy changes", async () => {
-			const app = device();
-			const first = await options.publish("801");
-			const second = await options.publish("802", {
-				enabled: false,
-				should_force_update: true
-			});
-			let catalog = await options.readCatalog();
-			await install(catalog, app, first, "UPDATE");
-			staysOn(catalog, app);
-			await options.update(second.release.id, { enabled: true });
-			catalog = await refresh(catalog);
-			await install(catalog, app, second, "UPDATE");
-			staysOn(catalog, app);
-			await options.update(second.release.id, { enabled: false });
-			catalog = await refresh(catalog);
-			await install(catalog, app, first, "ROLLBACK");
-			staysOn(catalog, app);
-			await options.update(first.release.id, { enabled: false });
-			catalog = await refresh(catalog);
-			useBuiltin(catalog, app);
-			staysOn(catalog, app);
-		}, 4e4);
-		it("rolls a deleted active Release back to older OTA bytes, then to built-in", async () => {
-			const app = device();
-			const first = await options.publish("811");
-			const second = await options.publish("812");
-			let catalog = await options.readCatalog();
-			await install(catalog, app, second, "UPDATE");
-			await options.remove(second.release.id);
-			catalog = await refresh(catalog);
-			await install(catalog, app, first, "ROLLBACK");
-			await options.remove(first.release.id);
-			catalog = await refresh(catalog);
-			useBuiltin(catalog, app);
-			staysOn(catalog, app);
-		}, 3e4);
-		it("respects the native minimum on fresh install and rollback with or without a Release receipt", async () => {
-			await options.publish("821");
-			const current = await options.publish("823", { enabled: false });
-			const app = device(createBundleRowFixture("822").id);
-			const catalog = await options.readCatalog();
-			useBuiltin(catalog, app);
-			for (const activeReleaseId of [current.release.id, null]) {
-				app.currentBundleId = current.bundle.id;
-				app.activeReleaseId = activeReleaseId;
-				useBuiltin(catalog, app);
-			}
-			expect(selectDesiredRelease(catalog, {
-				...device(current.bundle.id),
-				activeReleaseId: current.release.id
-			})).toBeNull();
-		});
-		it("re-evaluates cohort changes and rolls back even when the predecessor rollout is closed", async () => {
-			const app = {
-				...device(),
-				cohort: "staff"
-			};
-			const first = await options.publish("831", {
-				rollout_cohort_count: 0,
-				target_cohorts: ["staff"]
-			});
-			const second = await options.publish("832", {
-				rollout_cohort_count: 0,
-				target_cohorts: ["staff"]
-			});
-			const catalog = await options.readCatalog();
-			await install(catalog, app, second, "UPDATE");
-			app.cohort = "1";
-			await install(catalog, app, first, "ROLLBACK");
-			useBuiltin(catalog, app);
-			staysOn(catalog, app);
-		});
-		it("does not reinstall crashed OTAs after native recovery to a previous OTA or built-in", async () => {
-			const app = device();
-			const first = await options.publish("841");
-			const second = await options.publish("842", { enabled: false });
-			let catalog = await options.readCatalog();
-			await install(catalog, app, first, "UPDATE");
-			await options.update(second.release.id, { enabled: true });
-			catalog = await refresh(catalog);
-			await install(catalog, app, second, "UPDATE");
-			app.currentBundleId = first.bundle.id;
-			app.activeReleaseId = first.release.id;
-			app.crashedBundleIds = [second.bundle.id];
-			staysOn(catalog, app);
-			app.currentBundleId = app.builtInBundleId;
-			app.activeReleaseId = null;
-			app.crashedBundleIds = [first.bundle.id, second.bundle.id];
-			useBuiltin(catalog, app);
-			staysOn(catalog, app);
-			const fixed = await options.publish("843");
-			catalog = await refresh(catalog);
-			await install(catalog, app, fixed, "UPDATE");
-			staysOn(catalog, app);
-		}, 25e3);
-		it("selects a compatible OTA and stays on it despite a newer incompatible Release", async () => {
-			const app = device();
-			const compatible = await options.publish("851");
-			await options.publishIncompatible("852");
-			const catalog = await options.readCatalog();
-			await install(catalog, app, compatible, "UPDATE");
-			staysOn(catalog, app);
-		});
-	});
-}
-//#endregion
-//#region src/setupReleaseCatalogTestSuite.ts
-const NIL_UUID$1 = "00000000-0000-0000-0000-000000000000";
-const FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
-const channelKey = (channel) => btoa(String.fromCharCode(...new TextEncoder().encode(channel))).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-/**
-* Server conformance through HTTP only, on admin API protocol 2. The caller
-* owns server, database, and storage setup. Releases are written with
-* `POST /releases` and changed with `PATCH /releases/:id`; lifecycle scenarios
-* feed HTTP catalogs to the production client selector. Each test deletes
-* what it wrote, so a long-lived server can run the suite again.
-*/
-const setupReleaseCatalogTestSuite = (options) => {
-	describe("Release Catalog HTTP contract", () => {
-		let channelNamespace;
-		const api = createAdminApiTestClient(options.getClient);
-		const { admin, adminJson } = api;
-		beforeEach(() => {
-			channelNamespace = crypto.randomUUID();
+const setupReleaseCatalogTestSuite = (options) => {
+	describe("Release Catalog HTTP contract", () => {
+		let channelNamespace;
+		const api = createAdminApiTestClient(options.getClient);
+		const { admin, adminJson } = api;
+		beforeEach(() => {
+			channelNamespace = crypto.randomUUID();
 		});
 		afterEach(async () => {
 			await api.cleanup();
@@ -1656,18 +971,32 @@ const setupReleaseCatalogTestSuite = (options) => {
 				});
 				expect((await adminJson(catalogRowPath())).data).toMatchObject({ generation: catalog.generation + 1 });
 			});
-			it("hard deletes a Release, rebuilds its Catalog, and retains Bundle bytes", async () => {
+			const hardDelete = async (release) => {
+				await adminJson(`/releases/${release.id}?confirm=${release.id}&expectedRevision=${release.revision}`, jsonRequest("DELETE"));
+				api.forget(release.id);
+			};
+			it("hard deletes a Release, rebuilds its Catalog, and deletes the artifact no other Release uses", async () => {
 				const current = await publish("741", { enabled: false });
-				await adminJson(`/releases/${current.release.id}?confirm=${current.release.id}&expectedRevision=1`, jsonRequest("DELETE"));
-				api.forget(current.release.id);
+				await hardDelete(current.release);
 				expect((await admin(`/releases/${current.release.id}`)).status).toBe(404);
 				expect(await readCatalog()).toMatchObject({
 					releases: [],
 					rollbackReleases: []
 				});
-				const artifact = await request(`/artifacts/v1/${current.bundle.id}/from/${NIL_UUID$1}`);
+				expect((await request(`/artifacts/v1/${current.bundle.id}/from/${NIL_UUID$1}`)).status).toBe(404);
+			});
+			it("keeps serving an artifact while another Release uses it", async () => {
+				const first = await publish("742", { enabled: false });
+				const second = await publish("742", {
+					bundle_id: first.bundle.id,
+					enabled: false
+				}, scope("other"));
+				await hardDelete(first.release);
+				const artifact = await request(`/artifacts/v1/${first.bundle.id}/from/${NIL_UUID$1}`);
 				expect(artifact.status).toBe(200);
-				expect(await artifact.json()).toMatchObject({ manifestUrl: releaseCatalogDownloadUrl(current.bundle.manifest_storage_uri) });
+				expect(await artifact.json()).toMatchObject({ manifestUrl: releaseCatalogDownloadUrl(first.bundle.manifest_storage_uri) });
+				await hardDelete(second.release);
+				expect((await request(`/artifacts/v1/${first.bundle.id}/from/${NIL_UUID$1}`)).status).toBe(404);
 			});
 			it("serves enabled Releases newest first and resolves artifacts by Bundle identity", async () => {
 				const first = await publish("101");
@@ -1701,10 +1030,11 @@ const setupReleaseCatalogTestSuite = (options) => {
 				const otherPath = strategy === "APP_VERSION" ? `/release-catalogs/fingerprint/ios/${scope().channelKey}/fingerprint-a` : `/release-catalogs/app-version/ios/${scope().channelKey}/1.2.3`;
 				expect((await request(otherPath)).status).toBe(404);
 			});
-			it("returns an uncached 404 for an unknown scope", async () => {
+			it("caches an unknown scope's 404 like a catalog", async () => {
 				const response = await request(catalogPath());
 				expect(response.status).toBe(404);
-				expect(response.headers.get("cache-control")).toBe("private, no-store");
+				expect(response.headers.get("cache-control")).toBe("public, max-age=0, s-maxage=5");
+				expect(response.headers.get("x-hot-updater-catalog")).toBe("none");
 				await publish("121");
 				expect((await readCatalog()).releases).toHaveLength(1);
 			});
@@ -2016,9 +1346,8 @@ const setupReleaseCatalogTestSuite = (options) => {
 //#region src/setupDatabaseTestSuite.ts
 /**
 * A provider's database under Hot Updater's server: core's operations, the
-* Release Catalog contract, bundles, and Insights, all through HTTP, on the
-* tables the provider's tooling creates; with `createInsightsModel`, also the
-* Insights report contract in process.
+* Release Catalog contract, and bundles, all through HTTP, on the tables the
+* provider's tooling creates, then each opted-in plugin's suite.
 */
 const setupDatabaseTestSuite = (options) => {
 	setupDatabaseTestRunner(options, ({ getDatabase }) => {
@@ -2040,10 +1369,11 @@ const setupDatabaseTestSuite = (options) => {
 		setupCoreAdminTestSuite({ getClient });
 		setupBundleMethodsTestSuite({ getClient });
 		setupReleaseCatalogTestSuite({ getClient });
-		setupInsightsHttpTestSuite({ getClient });
-		const { createInsightsModel } = options;
-		if (createInsightsModel !== void 0) describe("Insights model", () => {
-			registerInsightsModelTests({ getDatabase: () => createInsightsModel(getDatabase()) });
+		for (const suite of options.plugins ?? []) describe(suite.name, () => {
+			suite.register({
+				getClient,
+				getDatabase
+			});
 		});
 	});
 };
@@ -2170,7 +1500,71 @@ const conformanceCounters = {
 		sort: ["shard"]
 	}]
 };
-const tables = [conformanceItems, conformanceCounters];
+/** Rows expire 1,000 ms after `at`; a null `at` never expires. */
+const conformanceExpiring = {
+	name: "conformance_expiring",
+	columns: [
+		{
+			name: "id",
+			type: "string",
+			nullable: false,
+			maxLength: 64
+		},
+		{
+			name: "grp",
+			type: "string",
+			nullable: false,
+			maxLength: 64
+		},
+		{
+			name: "at",
+			type: "integer",
+			nullable: true
+		},
+		{
+			name: "tags",
+			type: "string",
+			nullable: true,
+			maxLength: 64,
+			multi: true
+		},
+		{
+			name: "_v",
+			type: "integer",
+			nullable: false
+		}
+	],
+	key: ["id"],
+	indexes: [{
+		name: "byGroup",
+		eq: ["grp"],
+		sort: ["id"]
+	}, {
+		name: "byTag",
+		eq: ["tags"],
+		sort: []
+	}],
+	retention: {
+		column: "at",
+		ms: 1e3
+	}
+};
+const tables = [
+	conformanceItems,
+	conformanceCounters,
+	conformanceExpiring
+];
+const expiring = (id, at) => ({
+	type: "insert",
+	table: conformanceExpiring,
+	row: {
+		id,
+		grp: "g",
+		at,
+		tags: ["t"],
+		_v: 0
+	}
+});
 const item = (id, values = {}) => ({
 	id,
 	grp: "g",
@@ -2565,7 +1959,7 @@ const setupDatabaseAdapterConformanceSuite = (options) => {
 				for (;;) {
 					const last = read.at(-1);
 					const bound = last === void 0 ? {} : { [order === "asc" ? "lower" : "upper"]: {
-						values: indexOrderTuple(conformanceItems, findPhysicalIndex(conformanceItems, "byGroup"), last),
+						values: indexOrderColumns(conformanceItems, findPhysicalIndex(conformanceItems, "byGroup")).map((column) => last[column]),
 						inclusive: false
 					} };
 					const page = await query(adapter, {
@@ -2747,6 +2141,79 @@ const setupDatabaseAdapterConformanceSuite = (options) => {
 			const results = await Promise.all([adapter.write(skew(a, b)), adapter.write(skew(b, a))]);
 			expect(results.filter((result) => result.ok).length).toBeLessThanOrEqual(1);
 		});
+		const expiringIds = async (adapter) => ({
+			byGroup: ids(await adapter.query(conformanceExpiring, {
+				index: "byGroup",
+				eq: ["g"],
+				order: "asc",
+				limit: 500
+			})),
+			byTag: ids(await adapter.query(conformanceExpiring, {
+				index: "byTag",
+				eq: ["t"],
+				order: "asc",
+				limit: 500
+			}))
+		});
+		it.skipIf(options.retention === "ttl")("prunes expired rows oldest first, up to the limit, with their index entries", async () => {
+			const adapter = await setup();
+			await ok(adapter, [
+				expiring("a", 300),
+				expiring("b", 100),
+				expiring("c", 200),
+				expiring("d", null),
+				expiring("e", 5e3),
+				expiring("f", 100)
+			]);
+			expect(await adapter.prune(conformanceExpiring, 250, 2)).toBe(2);
+			expect((await expiringIds(adapter)).byGroup).toEqual([
+				"a",
+				"c",
+				"d",
+				"e"
+			]);
+			expect(await adapter.prune(conformanceExpiring, 250, 10)).toBe(1);
+			expect(await adapter.prune(conformanceExpiring, 250, 10)).toBe(0);
+			expect(await expiringIds(adapter)).toEqual({
+				byGroup: [
+					"a",
+					"d",
+					"e"
+				],
+				byTag: [
+					"a",
+					"d",
+					"e"
+				]
+			});
+			expect(await adapter.get(conformanceExpiring, [
+				["b"],
+				["c"],
+				["d"]
+			])).toEqual([
+				null,
+				null,
+				expect.objectContaining({
+					id: "d",
+					at: null
+				})
+			]);
+			await ok(adapter, [insert(item("kept"))]);
+			expect(await adapter.prune(conformanceExpiring, 1e4, 10)).toBe(2);
+			expect(ids(await query(adapter, {
+				index: "all",
+				eq: []
+			}))).toEqual(["kept"]);
+		});
+		it.skipIf(options.retention !== "ttl")("leaves expired rows to the backend's TTL and reads them until it deletes them", async () => {
+			const adapter = await setup();
+			expect(adapter.prune).toBeUndefined();
+			await ok(adapter, [expiring("old", 0), expiring("never", null)]);
+			expect(await expiringIds(adapter)).toEqual({
+				byGroup: ["never", "old"],
+				byTag: ["never", "old"]
+			});
+		});
 		it.skipIf(options.maxOps === void 0)("rejects an over-limit write before sending it", async () => {
 			const adapter = await setup();
 			const ops = Array.from({ length: (options.maxOps ?? 0) + 1 }, (_, index) => insert(item(`over${index}`)));
@@ -2760,6 +2227,568 @@ const setupDatabaseAdapterConformanceSuite = (options) => {
 	});
 };
 //#endregion
+//#region src/storageAdapterTestCases.ts
+const BUNDLE_ID = "0199a0c3-6f6e-7c3a-9a3e-1b2c3d4e5f60";
+/** `sha256/9f/<hash>.png`: where deploy keeps a shared asset below `assets/`. */
+const ASSET_PATH = getContentAddressedAssetStoragePath({
+	assetPath: "assets/logo.png",
+	fileHash: "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08"
+});
+const MANIFEST_KEY = createBundleStorageKey(BUNDLE_ID, "manifest.json");
+const ARCHIVE_KEY = createBundleStorageKey(BUNDLE_ID, "bundle.tar.br");
+const ASSET_KEY = `assets/${ASSET_PATH}`;
+const UNICODE_FOLDER = "unicode/한글 폴더";
+const UNICODE_KEY = `${UNICODE_FOLDER}/ünïcödé 😀.txt`;
+/** Keys whose URIs encode spaces, `#`, `%`, `@`, `+`, and Unicode. */
+const SPECIAL_KEYS = [
+	"with space/file name.txt",
+	"hash#1/100%.txt",
+	"symbols/logo@2x+dark.png",
+	UNICODE_KEY
+];
+/** How far a listed modification time may be from its put. */
+const CLOCK_SKEW_MS = 9e5;
+const encode = (text) => new TextEncoder().encode(text);
+const messageOf = (error) => error instanceof Error ? error.message : String(error);
+/** Deterministic bytes, so a reordered or dropped chunk shows up. */
+const patternBytes = (length, seed) => {
+	const bytes = new Uint8Array(length);
+	let state = seed;
+	for (let index = 0; index < length; index += 1) {
+		state ^= state << 13;
+		state ^= state >>> 17;
+		state ^= state << 5;
+		bytes[index] = state;
+	}
+	return bytes;
+};
+/**
+* A one-shot body that hands out a chunk only when its reader asks for one,
+* so `read()` tells whether the adapter read all of it.
+*/
+const bodyOf = (bytes, chunkSize = 16384) => {
+	let offset = 0;
+	return {
+		stream: new ReadableStream({ pull(controller) {
+			if (offset >= bytes.byteLength) {
+				controller.close();
+				return;
+			}
+			const end = Math.min(offset + chunkSize, bytes.byteLength);
+			controller.enqueue(bytes.slice(offset, end));
+			offset = end;
+		} }, { highWaterMark: 0 }),
+		read: () => offset === bytes.byteLength
+	};
+};
+/** A body that fails after its first chunk, like a file removed mid-upload. */
+const failingBody = (chunk) => {
+	let sent = false;
+	return new ReadableStream({ pull(controller) {
+		if (sent) {
+			controller.error(/* @__PURE__ */ new Error("The upload source failed."));
+			return;
+		}
+		sent = true;
+		controller.enqueue(chunk);
+	} }, { highWaterMark: 0 });
+};
+/** The bucket and base path of a URI `put` returned for `key`. */
+const locate = (storage, storageUri, key, basePath) => {
+	let parsed;
+	try {
+		parsed = parseStorageUri(storageUri, storage.protocol);
+	} catch (error) {
+		throw new Error(`put("${key}") returned "${storageUri}", which is not a canonical ${storage.protocol} storage URI: ${messageOf(error)}`);
+	}
+	if (basePath !== void 0) {
+		const expected = createStorageKeyBuilder(basePath)(key);
+		expect(parsed.key, `put("${key}") returned "${storageUri}"; below base path "${basePath}" its key is "${expected}"`).toBe(expected);
+	}
+	if (parsed.key === key) return {
+		bucket: parsed.bucket,
+		prefix: ""
+	};
+	if (parsed.key.endsWith(`/${key}`)) return {
+		bucket: parsed.bucket,
+		prefix: parsed.key.slice(0, -key.length - 1)
+	};
+	throw new Error(`put("${key}") returned "${storageUri}", whose key does not end with "${key}". Deploy derives the URIs of other objects from it.`);
+};
+/**
+* Puts objects the way deploy does and checks each URI `put` returns: a
+* canonical URI of the key, in the same bucket and below the same base path
+* as every other object.
+*/
+const objectsOf = (storage, basePath) => {
+	let root;
+	return {
+		async put(key, bytes, { knownLength = true, chunkSize } = {}) {
+			const body = bodyOf(bytes, chunkSize);
+			const { storageUri } = await storage.put({
+				key,
+				body: body.stream,
+				...knownLength ? { contentLength: bytes.byteLength } : {},
+				contentType: "application/octet-stream"
+			});
+			expect(body.read(), `put("${key}") resolved before it read the whole body`).toBe(true);
+			const location = locate(storage, storageUri, key, basePath);
+			root ??= location;
+			expect(location, `put("${key}") returned "${storageUri}", outside the bucket or base path of the objects before it`).toEqual(root);
+			return storageUri;
+		},
+		/** The URI `put` returns for `key`, which the case has not put. */
+		uriOf(key) {
+			if (root === void 0) throw new Error("Put an object before deriving another one's URI.");
+			return createStorageUri({
+				protocol: storage.protocol,
+				bucket: root.bucket,
+				key: createStorageKeyBuilder(root.prefix)(key)
+			});
+		}
+	};
+};
+/** The object's bytes through `get`, or null when `get` finds none. */
+const readObject = async (storage, storageUri) => {
+	const { response } = await storage.get({ storageUri });
+	if (response === null) return null;
+	expect(response, `get("${storageUri}") returned no Web Response`).toBeInstanceOf(Response);
+	let bytes;
+	try {
+		bytes = new Uint8Array(await response.arrayBuffer());
+	} catch (error) {
+		throw new Error(`get("${storageUri}") returned a response whose body could not be read: ${messageOf(error)}`, { cause: error });
+	}
+	const contentLength = response.headers.get("content-length");
+	if (contentLength !== null) expect(Number(contentLength), `get("${storageUri}") sent a content-length other than the object's size`).toBe(bytes.byteLength);
+	return bytes;
+};
+const expectBytes = (actual, expected, label) => {
+	expect(actual, `${label} found no object`).not.toBeNull();
+	expect(actual.byteLength, `${label} returned a body of the wrong size`).toBe(expected.byteLength);
+	expect(actual.findIndex((byte, index) => byte !== expected[index]), `${label} returned other bytes; first difference at index`).toBe(-1);
+};
+const expectObject = async (storage, storageUri, bytes) => {
+	expectBytes(await readObject(storage, storageUri), bytes, `get("${storageUri}")`);
+	if (storage.exists) expect(await storage.exists({ storageUri }), `exists("${storageUri}")`).toEqual({ exists: true });
+};
+const expectMissing = async (storage, storageUri) => {
+	expect((await storage.get({ storageUri })).response, `get("${storageUri}") of a missing object`).toBeNull();
+	if (storage.exists) expect((await storage.exists({ storageUri })).exists, `exists("${storageUri}") of a missing object`).toBe(false);
+};
+/** Expects a rejected promise: not a result, and not a synchronous throw. */
+const expectRejection = async (label, operation) => {
+	let pending;
+	try {
+		pending = operation();
+	} catch (error) {
+		throw new Error(`${label} threw instead of returning a rejected promise: ${messageOf(error)}`);
+	}
+	const outcome = await Promise.resolve(pending).then(() => "resolved", () => "rejected");
+	expect(outcome, label).toBe("rejected");
+};
+/** Every operation the adapter has that takes a storage URI rejects it. */
+const expectRejectedUri = async (storage, storageUri, owner) => {
+	const calls = {
+		get: storage.get && (() => storage.get({ storageUri })),
+		exists: storage.exists && (() => storage.exists({ storageUri })),
+		delete: storage.delete && (() => storage.delete({ storageUri })),
+		getDownloadUrl: storage.getDownloadUrl && (() => storage.getDownloadUrl({ storageUri }))
+	};
+	for (const [operation, call] of Object.entries(calls)) {
+		if (call === void 0) continue;
+		await expectRejection(`${operation}("${storageUri}") of ${owner}`, call);
+	}
+};
+const byKey = (left, right) => left.key < right.key ? -1 : left.key > right.key ? 1 : 0;
+const expectListing = (label, listed, expected, putWindow) => {
+	expect(listed.map(({ key, storageUri, size }) => ({
+		key,
+		storageUri,
+		size
+	})).sort(byKey), label).toEqual([...expected].sort(byKey));
+	for (const { key, lastModifiedAt } of listed) {
+		if (lastModifiedAt === void 0) continue;
+		expect(lastModifiedAt, `${label}: lastModifiedAt of "${key}"`).toBeInstanceOf(Date);
+		const time = lastModifiedAt.getTime();
+		expect(time >= putWindow.from - CLOCK_SKEW_MS && time <= putWindow.to + CLOCK_SKEW_MS, `${label}: "${key}" has lastModifiedAt ${String(lastModifiedAt)}, not the time it was put`).toBe(true);
+	}
+};
+const OPERATIONS = [
+	"put",
+	"get",
+	"getDownloadUrl",
+	"exists",
+	"delete",
+	"listObjects",
+	"deleteObjects"
+];
+const describeArgument = (value) => {
+	if (Array.isArray(value)) return `[${value.map((item) => JSON.stringify(item)).join(", ")}]`;
+	if (typeof value === "object" && value !== null) {
+		const { key, storageUri } = value;
+		return JSON.stringify(storageUri ?? key);
+	}
+	return value === void 0 ? "" : JSON.stringify(value);
+};
+/**
+* The adapter with each rejection naming its call, such as
+* `delete("s3://bucket/key") rejected: ...`. A synchronous throw stays one.
+*/
+const namingCalls = (storage) => {
+	const named = {
+		name: storage.name,
+		protocol: storage.protocol
+	};
+	for (const operation of OPERATIONS) {
+		const call = storage[operation];
+		if (typeof call !== "function") continue;
+		named[operation] = (...args) => Promise.resolve(call.apply(storage, args)).catch((error) => {
+			throw new Error(`${operation}(${args.map(describeArgument).join(", ")}) rejected: ${messageOf(error)}`, { cause: error });
+		});
+	}
+	return named;
+};
+const storageCase = (title, operations, run) => ({
+	title,
+	operations,
+	run: async ({ storage, basePath }) => {
+		assertStorageOperations(storage, [
+			"put",
+			"get",
+			...operations
+		]);
+		await run({
+			storage: namingCalls(storage),
+			basePath
+		});
+	}
+});
+/**
+* The storage adapter contract, from what its consumers rely on: deploy and
+* patch (`put`, `get`, `exists`, `delete`), the Console, the server's update
+* responses and signed downloads (`get`, `getDownloadUrl`), and
+* `storage prune` (`listObjects`, `deleteObjects`).
+*/
+const storageAdapterTestCases = [
+	storageCase("names the adapter and its URI protocol", [], async ({ storage }) => {
+		expect(typeof storage.name, "name").toBe("string");
+		expect(storage.name.length, "name length").toBeGreaterThan(0);
+		expect(storage.protocol, "protocol").toMatch(/^[a-z][a-z\d+.-]*$/);
+	}),
+	storageCase("stores a streamed body and reads it back", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const bytes = patternBytes(100003, 1);
+		const storageUri = await objects.put("round-trip/known-length.bin", bytes, { chunkSize: 4096 });
+		expectBytes(await readObject(storage, storageUri), bytes, `get("${storageUri}")`);
+		expectBytes(await readObject(storage, storageUri), bytes, `a second get("${storageUri}")`);
+	}),
+	storageCase("stores a streamed body of unknown length", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const bytes = patternBytes(20011, 2);
+		const storageUri = await objects.put("round-trip/unknown-length.bin", bytes, {
+			chunkSize: 1e3,
+			knownLength: false
+		});
+		expectBytes(await readObject(storage, storageUri), bytes, `get("${storageUri}")`);
+	}),
+	storageCase("stores an empty object", [], async ({ storage, basePath }) => {
+		const storageUri = await objectsOf(storage, basePath).put("round-trip/empty.txt", /* @__PURE__ */ new Uint8Array());
+		expectBytes(await readObject(storage, storageUri), /* @__PURE__ */ new Uint8Array(), `get("${storageUri}")`);
+	}),
+	storageCase("keeps concurrent puts of different keys apart", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const entries = Array.from({ length: 8 }, (_, index) => ({
+			key: `concurrent/${index}.bin`,
+			bytes: patternBytes(4e3 + index, 10 + index)
+		}));
+		const storageUris = await Promise.all(entries.map(({ key, bytes }) => objects.put(key, bytes, { chunkSize: 512 })));
+		for (const [index, { bytes }] of entries.entries()) expectBytes(await readObject(storage, storageUris[index]), bytes, `get("${storageUris[index]}")`);
+	}),
+	storageCase("returns the canonical URI of each key below the base path", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		for (const key of [
+			MANIFEST_KEY,
+			ASSET_KEY,
+			"nested/one/two/three/deep.txt",
+			...SPECIAL_KEYS
+		]) {
+			const bytes = encode(`object at ${key}`);
+			const storageUri = await objects.put(key, bytes);
+			expectBytes(await readObject(storage, storageUri), bytes, `get("${storageUri}")`);
+		}
+	}),
+	storageCase("reads objects at the URIs deploy derives from a manifest's URI", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const archive = patternBytes(3001, 3);
+		const asset = patternBytes(1234, 4);
+		const manifestUri = await objects.put(MANIFEST_KEY, encode(JSON.stringify({
+			bundleId: BUNDLE_ID,
+			assets: {}
+		})));
+		const archiveUri = await objects.put(ARCHIVE_KEY, archive);
+		const assetUri = await objects.put(ASSET_KEY, asset);
+		const derivedArchiveUri = getBundleArchiveStorageUri({
+			manifestStorageUri: manifestUri,
+			bundleId: BUNDLE_ID
+		});
+		const derivedAssetUri = createStorageUriWithRelativePath({
+			baseStorageUri: createStorageRootUriWithPath(manifestUri, BUNDLE_ID, "assets"),
+			relativePath: ASSET_PATH
+		});
+		expect(derivedArchiveUri, "the archive URI derived from the manifest's").toBe(archiveUri);
+		expect(derivedAssetUri, "the asset URI derived from the manifest's").toBe(assetUri);
+		await expectObject(storage, derivedArchiveUri, archive);
+		await expectObject(storage, derivedAssetUri, asset);
+	}),
+	storageCase("replaces an object put again under the same key", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const key = "overwrite/object.txt";
+		const storageUri = await objects.put(key, encode("first"));
+		expect(await objects.put(key, encode("second")), "a second put").toBe(storageUri);
+		expectBytes(await readObject(storage, storageUri), encode("second"), `get("${storageUri}")`);
+		expect(await Promise.all([objects.put(key, encode("shared")), objects.put(key, encode("shared"))]), "concurrent puts of one key").toEqual([storageUri, storageUri]);
+		expectBytes(await readObject(storage, storageUri), encode("shared"), `get("${storageUri}")`);
+	}),
+	storageCase("rejects a put whose body fails and keeps no object", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		await objects.put("failed-put/other.txt", encode("other"));
+		const key = "failed-put/object.bin";
+		await expectRejection(`put("${key}") of a body that fails`, () => storage.put({
+			key,
+			body: failingBody(patternBytes(4e3, 5)),
+			contentLength: 1e4,
+			contentType: "application/octet-stream"
+		}));
+		await expectMissing(storage, objects.uriOf(key));
+	}),
+	storageCase("returns a null response for a missing object", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		await objects.put("missing/object.txt", encode("present"));
+		for (const key of [
+			"missing/absent.txt",
+			"missing/object.tx",
+			"missing/object.txt.bak",
+			"missing"
+		]) {
+			const storageUri = objects.uriOf(key);
+			expect(await storage.get({ storageUri }), `get("${storageUri}") of a missing object`).toEqual({ response: null });
+		}
+	}),
+	storageCase("tells whether an object exists", ["exists"], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const storageUri = await objects.put("exists/object.txt", encode("present"));
+		expect(await storage.exists({ storageUri }), `exists("${storageUri}")`).toEqual({ exists: true });
+		for (const key of [
+			"exists/absent.txt",
+			"exists/object.tx",
+			"exists"
+		]) {
+			const missingUri = objects.uriOf(key);
+			expect(await storage.exists({ storageUri: missingUri }), `exists("${missingUri}")`).toEqual({ exists: false });
+		}
+	}),
+	storageCase("deletes exactly one object, and deleting it again succeeds", ["delete"], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const storageUri = await objects.put("delete/object.txt", encode("gone"));
+		const sibling = encode("kept");
+		const siblingUri = await objects.put("delete/object.txt.bak", sibling);
+		const child = encode("kept child");
+		const childUri = await objects.put("delete/object/child.txt", child);
+		expect(await storage.delete({ storageUri }), `delete("${storageUri}")`).toEqual({ deleted: true });
+		await expectMissing(storage, storageUri);
+		expect(await storage.delete({ storageUri }), `a second delete("${storageUri}")`).toEqual({ deleted: true });
+		for (const key of ["delete/never-stored.txt", "delete/object"]) {
+			const missingUri = objects.uriOf(key);
+			expect(await storage.delete({ storageUri: missingUri }), `delete("${missingUri}")`).toEqual({ deleted: true });
+		}
+		await expectObject(storage, siblingUri, sibling);
+		await expectObject(storage, childUri, child);
+	}),
+	storageCase("rejects the URI of an object in another bucket", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const bytes = encode("kept");
+		const storageUri = await objects.put("foreign/object.txt", bytes);
+		const { bucket, key } = parseStorageUri(storageUri, storage.protocol);
+		await expectRejectedUri(storage, createStorageUri({
+			protocol: storage.protocol,
+			bucket: `${bucket}-other`,
+			key
+		}), "another bucket");
+		await expectObject(storage, storageUri, bytes);
+	}),
+	storageCase("rejects the URI of another protocol", [], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const bytes = encode("kept");
+		const storageUri = await objects.put("foreign/object.txt", bytes);
+		const { bucket, key } = parseStorageUri(storageUri, storage.protocol);
+		await expectRejectedUri(storage, createStorageUri({
+			protocol: `not-${storage.protocol}`,
+			bucket,
+			key
+		}), "another protocol");
+		await expectObject(storage, storageUri, bytes);
+	}),
+	storageCase("resolves a download URL for a stored object", ["getDownloadUrl"], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		for (const key of ["download/object.txt", ...SPECIAL_KEYS]) {
+			const storageUri = await objects.put(key, encode(key));
+			const { url } = await storage.getDownloadUrl({ storageUri });
+			const label = `getDownloadUrl("${storageUri}") returned "${url}"`;
+			expect(typeof url, label).toBe("string");
+			if (/^[a-z][a-z\d+.-]*:/i.test(url)) {
+				expect(["http:", "https:"], `${label}; a URL must use http(s)`).toContain(new URL(url).protocol);
+				continue;
+			}
+			expect(parseStorageDownloadPath(url)?.storageUri, `${label}; a path must be the /storage/ path of the same URI`).toBe(storageUri);
+			expect((await storage.getDownloadUrl({ storageUri })).url, `${label}, then another path`).toBe(url);
+		}
+	}),
+	storageCase("lists every object with its key relative to the base path", ["listObjects"], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const entries = [
+			[MANIFEST_KEY, encode("{}")],
+			[ARCHIVE_KEY, patternBytes(3001, 6)],
+			[ASSET_KEY, patternBytes(1234, 7)],
+			["bundles-other/object.txt", encode("next to bundles/")],
+			...SPECIAL_KEYS.map((key) => [key, encode(key)])
+		];
+		const from = Date.now();
+		const stored = [];
+		for (const [key, bytes] of entries) stored.push({
+			key,
+			storageUri: await objects.put(key, bytes),
+			size: bytes.byteLength
+		});
+		const putWindow = {
+			from,
+			to: Date.now()
+		};
+		const below = (folder) => stored.filter(({ key }) => key.startsWith(`${folder}/`));
+		expectListing("listObjects()", await storage.listObjects(), stored, putWindow);
+		expectListing("listObjects(\"bundles\")", await storage.listObjects("bundles"), below("bundles"), putWindow);
+		expectListing(`listObjects("${UNICODE_FOLDER}")`, await storage.listObjects(UNICODE_FOLDER), below(UNICODE_FOLDER), putWindow);
+	}),
+	storageCase("deletes exactly the keys it receives", ["deleteObjects"], async ({ storage, basePath }) => {
+		const objects = objectsOf(storage, basePath);
+		const put = async (key) => {
+			const bytes = encode(key);
+			return {
+				key,
+				bytes,
+				storageUri: await objects.put(key, bytes)
+			};
+		};
+		const removed = [await put("delete-objects/object.txt"), await put(`delete-objects/${UNICODE_KEY}`)];
+		const kept = [await put("delete-objects/object.txt.bak"), await put("delete-objects/folder/child.txt")];
+		await storage.deleteObjects([]);
+		for (const object of [...removed, ...kept]) await expectObject(storage, object.storageUri, object.bytes);
+		await storage.deleteObjects([
+			...removed.map(({ key }) => key),
+			"delete-objects/never-stored.txt",
+			"delete-objects/folder"
+		]);
+		for (const object of removed) await expectMissing(storage, object.storageUri);
+		for (const object of kept) await expectObject(storage, object.storageUri, object.bytes);
+		if (storage.listObjects) expect((await storage.listObjects()).map(({ key }) => key).sort(), "listObjects() after deleteObjects").toEqual(kept.map(({ key }) => key).sort());
+	})
+];
+//#endregion
+//#region src/setupStorageAdapterTestSuite.ts
+/**
+* The storage adapter contract that deploy, patch, the Console, the server,
+* and `storage prune` rely on. Every official storage adapter runs it.
+*/
+const setupStorageAdapterTestSuite = (options) => {
+	const declared = options.operations;
+	const required = [.../* @__PURE__ */ new Set([
+		"put",
+		"get",
+		...declared ?? []
+	])];
+	describe(`${options.name} storage adapter`, () => {
+		it(`implements ${required.join(", ")}`, async () => {
+			const { storage, cleanup } = await options.createStorage();
+			try {
+				assertStorageOperations(storage, required);
+			} finally {
+				await cleanup?.();
+			}
+		});
+		for (const testCase of storageAdapterTestCases) {
+			const undeclared = declared === void 0 ? [] : testCase.operations.filter((operation) => !declared.includes(operation));
+			it.skipIf(undeclared.length > 0)(testCase.title, async (context) => {
+				const { storage, basePath, cleanup } = await options.createStorage();
+				try {
+					const missing = testCase.operations.filter((operation) => typeof storage[operation] !== "function");
+					if (declared === void 0 && missing.length > 0) context.skip(`${storage.name} lacks ${missing.join(", ")}`);
+					await testCase.run({
+						storage,
+						basePath
+					});
+				} finally {
+					await cleanup?.();
+				}
+			});
+		}
+	});
+};
+//#endregion
+//#region src/createMeasuredDatabase.ts
+const storageOf = (storage) => ({
+	name: "measuredStorage",
+	protocol: "storage",
+	get: async ({ storageUri }) => {
+		const text = await storage.readStorageText?.(storageUri) ?? null;
+		return { response: text === null ? null : new Response(text) };
+	},
+	getDownloadUrl: async ({ storageUri }) => ({ url: await storage.resolveFileUrl(storageUri) })
+});
+/**
+* Core and the plugins over `adapter` as `createHotUpdater` runs them: what
+* read-budget suites measure. The database is `meterReads` over
+* `verifyAdapter(adapter)`, so every adapter call is checked against the
+* contract and `measureReads` reports each call's reads; the adapter runs
+* as given, without the schema fence. It loads `@hot-updater/server`, an
+* optional peer, when called.
+*/
+const createMeasuredDatabase = async (adapter, plugins, options = {}) => {
+	const { createHotUpdater } = await import("@hot-updater/server");
+	let clientAuth;
+	const observed = plugins.map((plugin) => Object.defineProperties({}, {
+		...Object.getOwnPropertyDescriptors(plugin),
+		init: {
+			configurable: true,
+			enumerable: true,
+			writable: true,
+			value: (context) => {
+				const instance = plugin.init(options.now === void 0 ? context : {
+					...context,
+					now: options.now
+				});
+				if (instance.clientAuth !== void 0) clientAuth = instance.clientAuth;
+				return instance;
+			}
+		}
+	}));
+	const database = meterReads({
+		name: "measured",
+		adapter: verifyAdapter(adapter)
+	});
+	const hotUpdater = createHotUpdater({
+		database,
+		storage: options.storage === void 0 ? [] : [storageOf(options.storage)],
+		plugins: observed,
+		...plugins.some((plugin) => plugin.provides?.clientAuth === true) ? {} : { clientAccess: "public" }
+	});
+	return {
+		core: hotUpdater.core,
+		api: hotUpdater.api,
+		...clientAuth === void 0 ? {} : { clientAuth },
+		measureReads: database.measureReads
+	};
+};
+//#endregion
 //#region src/setupReadBudgetTestSuite.ts
 const DAY = 864e5;
 const HOUR = 36e5;
@@ -2792,7 +2821,6 @@ const eventOf = (n, overrides = {}) => ({
 	app_version: "1.0.0",
 	channel: "production",
 	metadata: {
-		username: null,
 		cohort: "1",
 		update_strategy: "appVersion",
 		fingerprint_hash: null,
@@ -2802,13 +2830,38 @@ const eventOf = (n, overrides = {}) => ({
 	...overrides
 });
 /**
-* History event `n` of the day before T0, three an hour, on its own release
-* and bundles: every windowed read, which starts at T0 or later, skips it.
+* Update failures on day 3, after every other windowed read's range: installs
+* 3 and 5 fail to download release-b, and install 7's update check fails.
 */
-const historyOf = (n) => eventOf(100 + n, {
-	install_id: `history-${n}`,
-	user_id: null,
-	from_bundle_id: "bundle-history-a",
+const failureOf = (n, install, check = false) => eventOf(200 + n, {
+	type: "UPDATE_FAILED",
+	install_id: `install-${install}`,
+	from_release_id: "release-a",
+	from_bundle_id: "bundle-a",
+	to_release_id: check ? null : "release-b",
+	to_bundle_id: check ? "bundle-a" : "bundle-b",
+	metadata: {
+		...eventOf(0).metadata,
+		failure: check ? {
+			stage: "check",
+			reason: "http",
+			http_status: 500
+		} : {
+			stage: "download",
+			reason: "http",
+			http_status: 403
+		}
+	},
+	received_at_ms: T0 + 3 * DAY + n * 10 * 6e4
+});
+/**
+* History event `n` of the day before T0, three an hour, on its own release
+* and bundles: every windowed read, which starts at T0 or later, skips it.
+*/
+const historyOf = (n) => eventOf(100 + n, {
+	install_id: `history-${n}`,
+	user_id: null,
+	from_bundle_id: "bundle-history-a",
 	to_release_id: "release-history",
 	to_bundle_id: "bundle-history-b",
 	received_at_ms: T0 - DAY + Math.floor((n - 1) / 3) * HOUR + (n - 1) % 3 * 6e5
@@ -2839,7 +2892,7 @@ const storage = {
 		bundleId: createBundleFixture("106").id,
 		assets: { "index.ios.bundle": { fileHash: "hbc-hash-106" } }
 	}) : null,
-	resolveFileUrl: async (storageUri) => storageUri === null ? null : `https://storage.example.com/${encodeURIComponent(storageUri)}`
+	resolveFileUrl: async (storageUri) => `https://storage.example.com/${encodeURIComponent(storageUri)}`
 };
 /**
 * Core's bundles, releases, channels, and a client API key, and 25 Insights
@@ -2847,8 +2900,8 @@ const storage = {
 * days later; and the day of history before T0, as a production database
 * holds, so a read that scans beyond its window examines more rows.
 */
-const seed = async (database, server) => {
-	const { core } = database;
+const seed = async (database) => {
+	const core = database.core;
 	const api = database.api;
 	for (const name of [
 		"staging",
@@ -2894,6 +2947,9 @@ const seed = async (database, server) => {
 		received_at_ms: T0 + 2 * DAY
 	}));
 	for (let n = 1; n <= 72; n += 1) await api.insights.recordEvent(historyOf(n));
+	await api.insights.recordEvent(failureOf(1, 3));
+	await api.insights.recordEvent(failureOf(2, 5));
+	await api.insights.recordEvent(failureOf(3, 7, true));
 	const channel = (name) => core.findChannelByName(name).then((found) => found);
 	const productionId = (await channel("production")).id;
 	return {
@@ -2904,7 +2960,7 @@ const seed = async (database, server) => {
 		productionId,
 		nightlyId: (await channel("nightly")).id,
 		/** The auto-patch base key of a new production iOS 1.0.0 bundle. */
-		candidateKey: server.targetBaseCandidateKey({
+		candidateKey: targetBaseCandidateKey({
 			channel: "production",
 			platform: "ios",
 			fingerprintHash: null,
@@ -3013,535 +3069,1826 @@ const READ_BUDGETS = [
 				kind: "channelPlatform",
 				channelId: productionId,
 				platform: "ios",
-				enabled: true
-			},
-			limit: 3
-		}),
-		adapter: reads(0, 0, 1, 3),
-		engine: {
-			calls: 1,
-			rows: 3
-		},
-		returned: (releases) => releases.length
-	}),
-	budget({
-		api: "deploy base candidates: 1 catalog point read",
-		read: ({ core, candidateKey }) => core.findBaseBundleIds(candidateKey, createBundleFixture("107").id, 2),
-		adapter: reads(1, 1, 0, 0),
-		engine: {
-			calls: 1,
-			rows: 1
-		},
-		check: (ids) => expect(ids).toEqual(["106", "105"].map((suffix) => createBundleFixture(suffix).id))
-	}),
-	budget({
-		api: "deploy latest release id: byScope descending, limit 1",
-		read: ({ core }) => core.latestReleaseId(scopeKey),
-		adapter: reads(0, 0, 1, 1),
-		engine: {
-			calls: 1,
-			rows: 1
-		}
-	}),
-	budget({
-		api: "channel by name: 1 read",
-		read: ({ core }) => core.findChannelByName("staging"),
-		adapter: reads(0, 0, 1, 1),
-		engine: {
-			calls: 1,
-			rows: 1
-		},
-		returned: (channel) => channel === null ? 0 : 1
-	}),
-	budget({
-		api: "list events of a dense day: limit rows from one query",
-		read: ({ insights }) => insights.listEvents({
-			filter: { kind: "all" },
-			sinceMs: T0 - DAY,
-			beforeReceivedAtMs: T0,
-			limit: 5
-		}),
-		adapter: reads(0, 0, 1, 5),
-		engine: {
-			calls: 1,
-			rows: 5
-		},
-		returned: (events) => events.length
-	}),
-	budget({
-		api: "list events across a gap: limit rows, one empty day, and one outcome row",
-		read: ({ insights }) => insights.listEvents({
-			filter: bundleEvents,
-			sinceMs: T0,
-			beforeReceivedAtMs: T0 + 3 * DAY,
-			limit: 5
-		}),
-		adapter: reads(1, 7, 4, 6),
-		engine: {
-			calls: 4,
-			rows: 6
-		},
-		returned: (events) => events.length + 1
-	}),
-	budget({
-		api: "list events over an empty range: its top day and one outcome read, both empty",
-		read: ({ insights }) => insights.listEvents({
-			filter: { kind: "all" },
-			sinceMs: T0 - 91 * DAY,
-			beforeReceivedAtMs: T0 - DAY,
-			limit: 5
-		}),
-		adapter: reads(0, 0, 2, 0),
-		engine: {
-			calls: 2,
-			rows: 0
-		},
-		returned: (events) => events.length
-	}),
-	budget({
-		api: "latest events by install: 1 point read",
-		read: ({ insights }) => insights.findLatestEvents({ installId: "install-1" }),
-		adapter: reads(1, 1, 0, 0),
-		engine: {
-			calls: 1,
-			rows: 1
-		},
-		returned: (events) => events.length
-	}),
-	budget({
-		api: "latest events by user: limit rows",
-		read: ({ insights }) => insights.findLatestEvents({
-			userId: "user-even",
-			limit: 3
-		}),
-		adapter: reads(0, 0, 1, 3),
-		engine: {
-			calls: 1,
-			rows: 3
-		},
-		returned: (events) => events.length
-	}),
-	budget({
-		api: "countEvents: buckets in the window × shards, all used",
-		read: ({ insights }) => insights.countEvents({
-			filter: bundleEvents,
-			sinceMs: T0,
-			beforeReceivedAtMs: T0 + 2 * HOUR
-		}),
-		adapter: reads(0, 0, 1, 11),
-		engine: {
-			calls: 1,
-			rows: 2
-		},
-		check: (count) => expect(count).toBe(11)
-	}),
-	budget({
-		api: "countLatestEvents: buckets in the window × shards, all used",
-		read: ({ insights }) => insights.countLatestEvents({
-			platform: "ios",
-			channel: "production",
-			sinceMs: T0 + HOUR
-		}),
-		adapter: reads(0, 0, 1, 20),
-		engine: {
-			calls: 1,
-			rows: 5
-		},
-		check: (count) => expect(count).toBe(20)
-	}),
-	budget({
-		api: "countLatestEvents by bundle: buckets in the window × shards, all used",
-		read: ({ insights }) => insights.countLatestEvents({
-			platform: "ios",
-			channel: "production",
-			sinceMs: T0,
-			bundle: [{
+				enabled: true
+			},
+			limit: 3
+		}),
+		adapter: reads(0, 0, 1, 3),
+		engine: {
+			calls: 1,
+			rows: 3
+		},
+		returned: (releases) => releases.length
+	}),
+	budget({
+		api: "deploy base candidates: 1 catalog point read",
+		read: ({ core, candidateKey }) => core.findBaseBundleIds(candidateKey, createBundleFixture("107").id, 2),
+		adapter: reads(1, 1, 0, 0),
+		engine: {
+			calls: 1,
+			rows: 1
+		},
+		check: (ids) => expect(ids).toEqual(["106", "105"].map((suffix) => createBundleFixture(suffix).id))
+	}),
+	budget({
+		api: "deploy latest release id: byScope descending, limit 1",
+		read: ({ core }) => core.latestReleaseId(scopeKey),
+		adapter: reads(0, 0, 1, 1),
+		engine: {
+			calls: 1,
+			rows: 1
+		}
+	}),
+	budget({
+		api: "channel by name: 1 read",
+		read: ({ core }) => core.findChannelByName("staging"),
+		adapter: reads(0, 0, 1, 1),
+		engine: {
+			calls: 1,
+			rows: 1
+		},
+		returned: (channel) => channel === null ? 0 : 1
+	}),
+	budget({
+		api: "list events of a dense day: limit rows from one query",
+		read: ({ insights }) => insights.listEvents({
+			filter: { kind: "all" },
+			sinceMs: T0 - DAY,
+			beforeReceivedAtMs: T0,
+			limit: 5
+		}),
+		adapter: reads(0, 0, 1, 5),
+		engine: {
+			calls: 1,
+			rows: 5
+		},
+		returned: (events) => events.length
+	}),
+	budget({
+		api: "list events across a gap: limit rows, one empty day, and one outcome row",
+		read: ({ insights }) => insights.listEvents({
+			filter: bundleEvents,
+			sinceMs: T0,
+			beforeReceivedAtMs: T0 + 3 * DAY,
+			limit: 5
+		}),
+		adapter: reads(1, 7, 4, 6),
+		engine: {
+			calls: 4,
+			rows: 6
+		},
+		returned: (events) => events.length + 1
+	}),
+	budget({
+		api: "list events over an empty range: its top day and one outcome read, both empty",
+		read: ({ insights }) => insights.listEvents({
+			filter: { kind: "all" },
+			sinceMs: T0 - 91 * DAY,
+			beforeReceivedAtMs: T0 - DAY,
+			limit: 5
+		}),
+		adapter: reads(0, 0, 2, 0),
+		engine: {
+			calls: 2,
+			rows: 0
+		},
+		returned: (events) => events.length
+	}),
+	budget({
+		api: "latest events by install: 1 point read",
+		read: ({ insights }) => insights.findLatestEvents({ installId: "install-1" }),
+		adapter: reads(1, 1, 0, 0),
+		engine: {
+			calls: 1,
+			rows: 1
+		},
+		returned: (events) => events.length
+	}),
+	budget({
+		api: "latest events by user: limit rows",
+		read: ({ insights }) => insights.findLatestEvents({
+			userId: "user-even",
+			limit: 3
+		}),
+		adapter: reads(0, 0, 1, 3),
+		engine: {
+			calls: 1,
+			rows: 3
+		},
+		returned: (events) => events.length
+	}),
+	budget({
+		api: "countEvents: buckets in the window × shards, all used",
+		read: ({ insights }) => insights.countEvents({
+			filter: bundleEvents,
+			sinceMs: T0,
+			beforeReceivedAtMs: T0 + 2 * HOUR
+		}),
+		adapter: reads(0, 0, 1, 11),
+		engine: {
+			calls: 1,
+			rows: 2
+		},
+		check: (count) => expect(count).toBe(11)
+	}),
+	budget({
+		api: "countLatestEvents: buckets in the window × shards, all used",
+		read: ({ insights }) => insights.countLatestEvents({
+			platform: "ios",
+			channel: "production",
+			sinceMs: T0
+		}),
+		adapter: reads(0, 0, 1, 15),
+		engine: {
+			calls: 1,
+			rows: 2
+		},
+		check: (count) => expect(count).toBe(24)
+	}),
+	budget({
+		api: "countLatestEvents by bundle: buckets in the window × shards, all used",
+		read: ({ insights }) => insights.countLatestEvents({
+			platform: "ios",
+			channel: "production",
+			sinceMs: T0,
+			bundle: [{
+				field: "to_bundle_id",
+				value: "bundle-b",
+				types: ["UPDATE_APPLIED"]
+			}]
+		}),
+		adapter: reads(0, 0, 1, 15),
+		engine: {
+			calls: 1,
+			rows: 2
+		},
+		check: (count) => expect(count).toBe(24)
+	}),
+	budget({
+		api: "release activity: buckets × shards, all used",
+		read: ({ insights }) => insights.getReleaseActivity({ releases: [{
+			releaseId: "release-b",
+			platform: "ios",
+			channel: "production"
+		}] }),
+		adapter: reads(0, 0, 1, 8),
+		engine: {
+			calls: 1,
+			rows: 1
+		},
+		check: ({ data }) => expect(data[0].metrics.launches).toBe(25)
+	}),
+	budget({
+		api: "release activity over a window: buckets × shards, all used",
+		read: ({ insights }) => insights.getReleaseActivity({
+			scope: {
+				platform: "ios",
+				channel: "production"
+			},
+			timeRange: {
+				start: T0,
+				end: T0 + 3 * DAY
+			}
+		}),
+		adapter: reads(0, 0, 2, 24),
+		engine: {
+			calls: 2,
+			rows: 4
+		},
+		check: ({ data }) => expect(data[0].metrics.launches).toBe(25)
+	}),
+	budget({
+		api: "app usage: nonzero distribution and usage-sketch rows in the window, all used",
+		read: ({ insights }) => insights.getAppUsage({
+			channel: "production",
+			platform: "all",
+			timeRange: {
+				start: T0,
+				end: T0 + 3 * DAY
+			},
+			intervalMs: DAY
+		}),
+		adapter: reads(0, 0, 4, 30),
+		engine: {
+			calls: 4,
+			rows: 4
+		},
+		check: ({ versions }) => expect(versions).toEqual([{
+			name: "1.0.0",
+			installations: 24
+		}])
+	}),
+	budget({
+		api: "update failures of a release over a window: buckets × shards, all used",
+		read: ({ insights }) => insights.getUpdateFailures({
+			platform: "ios",
+			channel: "production",
+			releaseId: "release-b",
+			timeRange: {
+				start: T0 + 3 * DAY,
+				end: T0 + 4 * DAY
+			}
+		}),
+		adapter: reads(0, 0, 3, 5),
+		engine: {
+			calls: 3,
+			rows: 3
+		},
+		check: (failures) => {
+			expect(failures).toMatchObject({ failedUpdates: 2 });
+			expect(failures.breakdown).toEqual([{
+				stage: "download",
+				reason: "http",
+				events: 2,
+				details: [expect.anything()]
+			}]);
+		}
+	}),
+	budget({
+		api: "update failures of a channel over a window: buckets × shards, all used",
+		read: ({ insights }) => insights.getUpdateFailures({
+			platform: "ios",
+			channel: "production",
+			timeRange: {
+				start: T0 + 3 * DAY,
+				end: T0 + 4 * DAY
+			}
+		}),
+		adapter: reads(0, 0, 5, 6),
+		engine: {
+			calls: 5,
+			rows: 4
+		},
+		check: (failures) => expect(failures).toMatchObject({
+			failedUpdates: 2,
+			checks: { failures: 1 }
+		})
+	}),
+	budget({
+		api: "update failures of a release since its first: two kept rows × shards, all used",
+		read: ({ insights }) => insights.getUpdateFailures({
+			platform: "ios",
+			channel: "production",
+			releaseId: "release-b"
+		}),
+		adapter: reads(0, 0, 2, 10),
+		engine: {
+			calls: 2,
+			rows: 2
+		},
+		check: (failures) => expect(failures).toMatchObject({
+			failedUpdates: 2,
+			failedInstallations: 2
+		})
+	}),
+	budget({
+		api: "catalog compile: the scope's enabled releases, all used",
+		read: ({ core }) => core.deploy([{
+			bundle: bundleOf("107"),
+			release: production
+		}]),
+		adapter: (copies) => reads(copies ? 5 : 3, copies ? 8 : 3, 3, 6),
+		engine: {
+			calls: 6,
+			rows: 9
+		},
+		writes: 1
+	}),
+	budget({
+		api: "channel insert: 1 write, after the name's read finds nothing",
+		read: ({ core }) => core.ensureChannel("read-budgets"),
+		adapter: reads(0, 0, 1, 0),
+		engine: {
+			calls: 1,
+			rows: 0
+		},
+		writes: 1
+	}),
+	budget({
+		api: "channel delete: 1 read and 1 write",
+		read: ({ core, nightlyId }) => core.deleteChannel(nightlyId),
+		adapter: reads(1, 1, 0, 0),
+		engine: {
+			calls: 1,
+			rows: 1
+		},
+		writes: 1,
+		check: (result) => expect(result).toEqual({ deleted: true })
+	}),
+	budget({
+		api: "record an insights event: 2 dependent rounds of batch gets and 1 write",
+		read: ({ insights }) => insights.recordEvent(eventOf(26, {
+			install_id: "install-2",
+			received_at_ms: T0 + 3 * HOUR
+		})),
+		adapter: reads(4, 7, 0, 0),
+		engine: {
+			calls: 2,
+			rows: 1
+		},
+		writes: 1
+	})
+];
+/**
+* The read-budget suite (PRD S4) on one backend: core and the server's
+* built-in plugins on `createMeasuredDatabase` over the backend's adapter,
+* native pages capped at two rows. Every API in the read-budget list reads
+* exactly its budget at the adapter and at the engine; with `examined`, the
+* database examines no more rows than the adapter read, within the backend's
+* native multipliers. It loads `@hot-updater/server`, an optional peer.
+*/
+const setupReadBudgetTestSuite = (options) => {
+	describe(`${options.name} read budgets`, () => {
+		let created;
+		let database;
+		let seeded;
+		let writes = 0;
+		beforeAll(async () => {
+			const [{ insights }, { apiKeys }] = await Promise.all([import("@hot-updater/server/plugins/insights"), import("@hot-updater/server/plugins/api-keys")]);
+			const plugins = [insights(), apiKeys()];
+			created = await options.createAdapter({
+				tables: [...toolingTargetOf(plugins).schema.tables, SETTINGS_TABLE],
+				nativePageSize: NATIVE_PAGE_SIZE
+			});
+			const { adapter } = created;
+			database = await createMeasuredDatabase({
+				...adapter,
+				write: (ops) => {
+					writes += 1;
+					return adapter.write(ops);
+				}
+			}, plugins, {
+				now: () => T0 + 10 * DAY,
+				storage
+			});
+			seeded = await seed(database);
+		}, 3e5);
+		afterAll(async () => {
+			await created?.cleanup?.();
+		});
+		for (const budget of READ_BUDGETS) it(budget.api, async () => {
+			const { examined, indexCopies = false } = created;
+			writes = 0;
+			examined?.reset();
+			const measured = await database.measureReads(() => budget.read(seeded));
+			const adapter = typeof budget.adapter === "function" ? budget.adapter(indexCopies) : budget.adapter;
+			expect({
+				adapter: measured.adapter,
+				engine: measured.engine
+			}).toEqual({
+				adapter,
+				engine: budget.engine
+			});
+			expect(writes, "writes").toBe(budget.writes ?? 0);
+			if (budget.returned) expect(budget.returned(measured.result), "rows returned").toBe(measured.engine.rows);
+			budget.check?.(measured.result);
+			if (examined) {
+				const { gets, keys, queries, rows } = measured.adapter;
+				expect(await examined.total(), "rows examined").toBeLessThanOrEqual((examined.perRow ?? 1) * (keys + rows) + (examined.perRead ?? 0) * (gets + queries));
+			}
+		});
+	});
+};
+//#endregion
+//#region src/runContentionHarness.ts
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** Delays every adapter call by `ms`, like a round trip to a remote database. */
+const withAdapterLatency = (adapter, ms) => ({
+	...adapter,
+	get: async (table, keys) => {
+		await sleep(ms);
+		return adapter.get(table, keys);
+	},
+	query: async (table, request) => {
+		await sleep(ms);
+		return adapter.query(table, request);
+	},
+	write: async (ops) => {
+		await sleep(ms);
+		return adapter.write(ops);
+	}
+});
+/**
+* Starts `transactions` runs at a steady arrival rate through a fixed pool and
+* reports how they ended. Retry counts come from the engine's `onRetry`.
+*/
+const runContentionHarness = async (options) => {
+	const started = Date.now();
+	const errors = {};
+	const waiting = [];
+	let free = options.concurrency;
+	let committed = 0;
+	const acquire = () => free > 0 ? (free -= 1, Promise.resolve()) : new Promise((resolve) => waiting.push(resolve));
+	const release = () => {
+		const next = waiting.shift();
+		if (next) next();
+		else free += 1;
+	};
+	await Promise.all(Array.from({ length: options.transactions }, async (_, index) => {
+		await sleep(index * 1e3 / options.ratePerSecond);
+		await acquire();
+		try {
+			await options.run(index);
+			committed += 1;
+		} catch (error) {
+			const name = error instanceof Error ? error.name : "unknown";
+			errors[name] = (errors[name] ?? 0) + 1;
+		} finally {
+			release();
+		}
+	}));
+	return {
+		transactions: options.transactions,
+		committed,
+		errors,
+		durationMs: Date.now() - started
+	};
+};
+//#endregion
+//#region src/setupAggregateBatchingTestSuite.ts
+const identity = (name) => ({ [name]: {
+	type: "string",
+	maxLength: 16
+} });
+/**
+* A plugin's tables, shaped like `defineTable` and `defineAggregate` build
+* them, under their own names.
+*/
+const plugin = {
+	id: "batching",
+	schemaVersion: "1",
+	namespace: false,
+	schema: {
+		installs: {
+			kind: "table",
+			fields: {
+				id: {
+					type: "string",
+					maxLength: 64
+				},
+				release: {
+					type: "string",
+					maxLength: 16
+				}
+			},
+			key: ["id"],
+			derived: {},
+			indexes: {}
+		},
+		distribution: {
+			kind: "aggregate",
+			fields: identity("release"),
+			key: ["release"],
+			counters: [],
+			gauges: ["installations"],
+			distinct: [],
+			shards: 8,
+			batched: true,
+			indexes: { byRelease: {
+				eq: ["release"],
+				sort: []
+			} }
+		},
+		opens: {
+			kind: "aggregate",
+			fields: { day: { type: "integer" } },
+			key: ["day"],
+			counters: ["opens"],
+			gauges: [],
+			distinct: [],
+			shards: 4,
+			batched: true,
+			indexes: { all: {
+				eq: [],
+				sort: ["day"]
+			} }
+		},
+		users: {
+			kind: "aggregate",
+			fields: { day: { type: "integer" } },
+			key: ["day"],
+			counters: [],
+			gauges: [],
+			distinct: ["users"],
+			shards: 4,
+			batched: true,
+			indexes: { all: {
+				eq: [],
+				sort: ["day"]
+			} }
+		}
+	}
+};
+const RELEASES = [
+	"A",
+	"B",
+	"C"
+];
+/** Step `step`: 12 installations, each moving to the next release every round of 12. */
+const stepOf = (step) => ({
+	id: `i${step % 12}`,
+	release: RELEASES[(Math.floor(step / 12) + step) % 3],
+	day: 1 + step % 2
+});
+/** An installation opens the app on `release`, moving its gauge when the release changed. */
+const open = (db, step) => {
+	const { id, release, day } = stepOf(step);
+	return db.transaction(async (tx) => {
+		const head = await tx.findOne("installs", { id });
+		if (head === null) tx.create("installs", {
+			id,
+			release
+		});
+		else if (head.release !== release) {
+			tx.update("installs", head, { release });
+			const from = { release: head.release };
+			tx.aggregate("distribution", from, { installations: -1 }, { shardBy: id });
+		}
+		if (head?.release !== release) tx.aggregate("distribution", { release }, { installations: 1 }, { shardBy: id });
+		tx.aggregate("opens", { day }, { opens: 1 }, { shardBy: id });
+		const users = addDistinct(null, id);
+		tx.aggregate("users", { day }, { users }, { shardBy: id });
+	});
+};
+/** Every aggregate as reads see it, sketches as their estimates. */
+const snapshot = async (db) => {
+	const read = (model, index, where = {}) => db.findAggregates(model, {
+		index,
+		where,
+		limit: 100
+	});
+	const releases = await Promise.all(RELEASES.map((release) => read("distribution", "byRelease", { release })));
+	const [opens, users] = await Promise.all([read("opens", "all"), read("users", "all")]);
+	return {
+		distribution: releases.flatMap(({ rows }) => rows),
+		opens: opens.rows,
+		users: users.rows.map((row) => ({
+			day: row.day,
+			users: countDistinct(row.users)
+		}))
+	};
+};
+/**
+* Aggregates declared `batched` on a key-value store: log rows the store
+* writes with each transaction and a compaction merges once, and a memory
+* buffer, read back exactly as transactional writes read.
+*/
+const setupAggregateBatchingTestSuite = ({ name, createAdapter, oversizedRows }) => {
+	const tables = [...toolingTargetOf([plugin]).schema.tables, ...aggregateBatchingTables];
+	const cleanups = [];
+	const store = async () => {
+		const { adapter, cleanup } = await createAdapter();
+		if (cleanup) cleanups.push(cleanup);
+		await adapter.migrations?.apply(tables);
+		return adapter;
+	};
+	/** A server's engine on `adapter`, batching as `batching` says. */
+	const server = (adapter, batching) => {
+		const engine = createEngine({
+			name,
+			adapter,
+			...batching === void 0 ? {} : { aggregateBatching: batching },
+			retry: { attempts: 64 }
+		}, { plugins: [plugin] });
+		return {
+			db: engine.database(plugin),
+			flush: engine.flush
+		};
+	};
+	/** The reference: transactional writes on a memory adapter. */
+	const expected = async (steps) => {
+		const memory = createMemoryAdapter();
+		await memory.migrations?.apply(tables);
+		const { db } = server(memory);
+		for (let step = 0; step < steps; step += 1) await open(db, step);
+		return snapshot(db);
+	};
+	describe(`${name} aggregate batching`, () => {
+		afterEach(async () => {
+			for (const cleanup of cleanups.splice(0)) await cleanup();
+		});
+		for (const mode of ["log", "memory"]) it(`reads what transactional writes read, in ${mode} mode`, async () => {
+			const { db } = server(await store(), { mode });
+			for (let step = 0; step < 36; step += 1) await open(db, step);
+			expect(await snapshot(db)).toEqual(await expected(36));
+		}, 12e4);
+		it("applies each log row once when two servers compact while 16 writers commit", async () => {
+			const adapter = await store();
+			const first = server(adapter, {
+				mode: "log",
+				windowMs: 0
+			});
+			const second = server(adapter, {
+				mode: "log",
+				windowMs: 0
+			});
+			const report = await runContentionHarness({
+				transactions: 12,
+				ratePerSecond: 1e3,
+				concurrency: 16,
+				run: async (install) => {
+					for (let round = 0; round < 4; round += 1) {
+						const db = (install + round) % 2 === 0 ? first.db : second.db;
+						await open(db, round * 12 + install);
+					}
+				}
+			});
+			expect(report.errors).toEqual({});
+			await Promise.all([first.flush(), second.flush()]);
+			await first.flush();
+			expect(await snapshot(second.db)).toEqual(await expected(48));
+		}, 3e5);
+		it("applies a log row larger than one write in parts, each change once", async () => {
+			const { db, flush } = server(await store(), { mode: "log" });
+			await db.transaction(async (tx) => {
+				for (let day = 1; day <= oversizedRows; day += 1) tx.aggregate("opens", { day }, { opens: day }, { shardBy: "i" });
+			});
+			await flush();
+			const { rows } = await db.findAggregates("opens", {
+				index: "all",
+				where: {},
+				limit: 500
+			});
+			const days = Math.min(oversizedRows, 500);
+			expect(rows).toHaveLength(days);
+			expect(rows.every((row) => row.opens === row.day)).toBe(true);
+		}, 3e5);
+	});
+};
+//#endregion
+//#region src/sqlRowsExamined.ts
+/** Wraps executors so each read they run while counting is examined first. */
+const examineReads = (hooks) => {
+	let counting = false;
+	let examined = 0;
+	return {
+		/** The executor, examining each SELECT it runs outside a transaction. */
+		wrap: (executor) => ({
+			...executor,
+			async execute(statement) {
+				if (counting && /^\s*SELECT\b/iu.test(statement.sql)) {
+					const rows = await hooks.examine(statement);
+					examined += rows;
+				}
+				return executor.execute(statement);
+			}
+		}),
+		examined: {
+			reset() {
+				counting = true;
+				examined = 0;
+				hooks.onReset?.();
+			},
+			async total() {
+				counting = false;
+				return examined;
+			}
+		}
+	};
+};
+/** Rows each table read of a plan examined: rows it produced, filtered out, or rechecked away, over all its loops. */
+const postgresTableReads = (node, reads = /* @__PURE__ */ new Map()) => {
+	const relation = node["Relation Name"];
+	if (relation !== void 0) {
+		const table = node.Alias ?? relation;
+		const rows = (node["Actual Rows"] ?? 0) + (node["Rows Removed by Filter"] ?? 0) + (node["Rows Removed by Index Recheck"] ?? 0);
+		reads.set(table, (reads.get(table) ?? 0) + rows * (node["Actual Loops"] ?? 0));
+	}
+	for (const child of node.Plans ?? []) postgresTableReads(child, reads);
+	return reads;
+};
+/**
+* Planner settings under which a test's small tables plan as production-sized
+* ones: no sequential scan, which only a small table affords, and an index
+* entry weighted like a row, so a plan reads no more entries than the read
+* needs, as a large index forces.
+*/
+const POSTGRES_PLANNER = ["enable_seqscan = off", "cpu_index_tuple_cost = 1"];
+/**
+* Rows examined on PostgreSQL (PGlite or a server). Each SELECT a wrapped
+* executor runs is first run under `EXPLAIN (ANALYZE, FORMAT JSON)` on
+* `query`, one session with the planner settings above; each `reset` first
+* vacuums and analyzes, as autovacuum keeps a production database. A plan
+* then takes the index path a production-sized table takes, and a read no
+* index serves still scans. A statement counts the rows its busiest table
+* read examined, so an exact plan counts the rows it returns, a multi-valued
+* index's own table included.
+*/
+const postgresRowsExamined = (query) => {
+	let planner;
+	let stale = true;
+	return examineReads({
+		onReset: () => {
+			stale = true;
+		},
+		async examine({ sql, params }) {
+			planner ??= (async () => {
+				for (const setting of POSTGRES_PLANNER) await query(`SET ${setting}`, []);
+			})();
+			await planner;
+			if (stale) {
+				stale = false;
+				await query("VACUUM ANALYZE", []);
+			}
+			const [row] = await query(`EXPLAIN (ANALYZE, FORMAT JSON) ${sql}`, params);
+			const output = row?.["QUERY PLAN"];
+			const [plan] = typeof output === "string" ? JSON.parse(output) : output;
+			return Math.max(0, ...postgresTableReads(plan.Plan).values());
+		}
+	});
+};
+/**
+* An `EXPLAIN ANALYZE` iterator that reads a table: its table, and its actual
+* rows and loops. A primary-key read of constants runs while MySQL plans the
+* statement, and names no table.
+*/
+const MYSQL_TABLE_READ = /-> (?:(?:Table scan|(?:Covering )?[Ii]ndex (?:scan|lookup|range scan|skip scan)|Single-row (?:covering )?index lookup|Multi-range index scan) on (\S+)|Rows fetched before execution).*\(actual time=[\d.e+-]+\.\.[\d.e+-]+ rows=([\d.e+-]+) loops=(\d+)\)/u;
+/**
+* Rows examined on MySQL. Each SELECT a wrapped executor runs is first run
+* under `EXPLAIN ANALYZE` on `query`, one session, after `ANALYZE TABLE` of
+* the tables it reads once per `reset`, and with multi-range reads always
+* on, so a secondary index's range is costed with sorted row reads, as a
+* production-sized table's is. A statement counts the rows its busiest table
+* read examined; a filter above a table read drops rows that read produced.
+*/
+const mysqlRowsExamined = (query) => {
+	let planner;
+	const analyzed = /* @__PURE__ */ new Set();
+	return examineReads({
+		onReset: () => {
+			analyzed.clear();
+		},
+		async examine({ sql, params }) {
+			planner ??= query("SET SESSION optimizer_switch = 'mrr=on,mrr_cost_based=off'", []);
+			await planner;
+			const tables = [...sql.matchAll(/(?:FROM|JOIN) (`[^`]+`)/gu)].map(([, table]) => table).filter((table) => !analyzed.has(table));
+			for (const table of tables) analyzed.add(table);
+			if (tables.length > 0) await query(`ANALYZE TABLE ${tables.join(", ")}`, []);
+			const [row] = await query(`EXPLAIN ANALYZE ${sql}`, params);
+			const reads = /* @__PURE__ */ new Map();
+			for (const line of String(Object.values(row ?? {})[0]).split("\n")) {
+				const read = MYSQL_TABLE_READ.exec(line);
+				if (read === null) continue;
+				const [, table = "", rows, loops] = read;
+				reads.set(table, (reads.get(table) ?? 0) + Number(rows) * Number(loops));
+			}
+			return Math.max(0, ...reads.values());
+		}
+	});
+};
+//#endregion
+//#region src/createPluginTestHarness.ts
+/**
+* Runs one plugin on `createEngine`, the storage engine `createHotUpdater`
+* runs its plugins on, so tests can call its API and measure what each call
+* reads. Every adapter call is checked against the adapter contract
+* (`verifyAdapter`), and `ctx.core` is empty: core's reads need a server.
+* The engine gets the adapter without `prune`, as a store that expires rows
+* itself would give it, so no retention pass adds to what a call reads and
+* writes; rows stay past their retention.
+*/
+const createPluginTestHarness = async (plugin, options = {}) => {
+	const adapter = options.adapter ?? createMemoryAdapter();
+	const core = new Set(coreSchema.tables.map(({ name }) => name));
+	const tables = toolingTargetOf([plugin]).schema.tables.filter(({ name }) => !core.has(name));
+	await adapter.migrations?.apply(tables);
+	let clock = options.now ?? Date.now;
+	const now = () => clock();
+	const database = meterReads({
+		name: "plugin test harness",
+		adapter: verifyAdapter(Object.assign(Object.create(adapter), { prune: void 0 }))
+	});
+	const db = createEngine(database, {
+		plugins: [plugin],
+		now
+	}).database(plugin);
+	const instance = plugin.init({
+		db,
+		core: {},
+		now
+	});
+	return {
+		api: instance.api,
+		instance,
+		/** The plugin's own database handle. */
+		db,
+		adapter,
+		/** The plugin's physical tables. */
+		tables,
+		/** Reads at the adapter and at the engine while `read` runs. */
+		measureReads: database.measureReads,
+		setNow: (next) => {
+			clock = next;
+		}
+	};
+};
+//#endregion
+//#region src/storeBundles.ts
+/**
+* Stores bundles and their patches with no release, as a database holds an
+* artifact that no release uses. `deploy` always adds a release, and
+* deleting a bundle's last release deletes the bundle, so tests store such
+* bundles through the engine. A patch's base comes before it in `bundles`.
+*/
+const storeBundles = async (database, bundles) => {
+	const engine = createEngine(database);
+	try {
+		await engine.core.transaction(async (tx) => {
+			for (const bundle of bundles) {
+				tx.create("bundles", bundleToRow(bundle));
+				for (const platformKey of [bundle.platform, "*"]) tx.aggregate("bundle_totals", { platform_key: platformKey }, { bundles: 1 });
+				for (const row of bundleToPatchRows(bundle)) tx.create("bundle_patches", row);
+			}
+		});
+	} finally {
+		await engine.dispose();
+	}
+};
+//#endregion
+//#region src/insights/expectInsightsIndex.ts
+/** Allow committed secondary indexes to catch up; query failures still fail. */
+const expectInsightsIndex = async (query, expected) => {
+	const deadline = Date.now() + 5e3;
+	for (;;) {
+		const actual = await query();
+		try {
+			expect(actual).toEqual(expected);
+			return;
+		} catch (error) {
+			if (Date.now() >= deadline) throw error;
+		}
+		await new Promise((resolve) => setTimeout(resolve, 50));
+	}
+};
+//#endregion
+//#region src/insights/fixtures.ts
+const fixtureId = (suffix) => `00000000-0000-7000-8000-${suffix.padStart(12, "0")}`;
+/** An applied update from install `suffix`, received at `receivedAtMs`. */
+const createBundleEventRowFixture = (suffix, receivedAtMs) => ({
+	id: fixtureId(suffix),
+	type: "UPDATE_APPLIED",
+	install_id: `install-${suffix}`,
+	user_id: null,
+	metadata: {
+		cohort: "0",
+		update_strategy: "appVersion",
+		fingerprint_hash: null,
+		sdk_version: null
+	},
+	from_bundle_id: fixtureId(`${Number(suffix) + 1e3}`),
+	from_release_id: null,
+	to_bundle_id: fixtureId(`${Number(suffix) + 2e3}`),
+	to_release_id: null,
+	platform: "ios",
+	app_version: "1.0.0",
+	channel: "production",
+	received_at_ms: receivedAtMs
+});
+//#endregion
+//#region src/insights/insightsModelTests.ts
+const record = (model, event) => model.recordEvent({ event });
+const createMovementEvent = (suffix, receivedAtMs, type, installId) => {
+	const row = createBundleEventRowFixture(suffix, receivedAtMs);
+	return {
+		...row,
+		type,
+		install_id: installId,
+		from_bundle_id: row.to_bundle_id,
+		metadata: {
+			...row.metadata,
+			update_strategy: "appVersion"
+		}
+	};
+};
+/**
+* The Insights report contract on `InsightsModel`: what the Insights plugin
+* records and reads, through `createInsightsModel`, on one database.
+*/
+const registerInsightsModelTests = (state) => {
+	describe("Insights report contract", () => {
+		it("preserves ancillary JSON through event history and latest-event reads", async () => {
+			const model = state.getDatabase();
+			const base = createBundleEventRowFixture("979", 100);
+			const event = {
+				...base,
+				metadata: {
+					...base.metadata,
+					device: {
+						locale: "ko-KR",
+						tags: [
+							"minor",
+							null,
+							true,
+							2
+						]
+					},
+					diagnostic: null
+				}
+			};
+			await record(model, event);
+			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([event]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 101,
+				limit: 10
+			}), [event]);
+		});
+		it("selects the latest complete event across download, replacement, apply, and delayed reports", async () => {
+			const model = state.getDatabase();
+			const download = {
+				...createBundleEventRowFixture("980", 100),
+				type: "UPDATE_DOWNLOADED",
+				from_bundle_id: "00000000-0000-7000-8000-000000001980",
+				metadata: {
+					...createBundleEventRowFixture("980", 100).metadata,
+					update_strategy: "appVersion"
+				},
+				to_release_id: "00000000-0000-7000-8000-000000004980"
+			};
+			await record(model, download);
+			await record(model, download);
+			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([download]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: {
+					kind: "bundle",
+					type: "UPDATE_DOWNLOADED",
+					toBundleId: download.to_bundle_id,
+					platform: "ios",
+					channel: "production"
+				},
+				beforeReceivedAtMs: 200,
+				limit: 10
+			}), [download]);
+			const replacement = {
+				...download,
+				id: createBundleEventRowFixture("981", 110).id,
+				received_at_ms: 110,
+				to_bundle_id: "00000000-0000-7000-8000-000000002981"
+			};
+			await record(model, replacement);
+			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([replacement]);
+			const applied = {
+				...replacement,
+				type: "UPDATE_APPLIED",
+				id: createBundleEventRowFixture("982", 120).id,
+				received_at_ms: 120
+			};
+			await record(model, applied);
+			await record(model, {
+				...download,
+				id: createBundleEventRowFixture("983", 105).id,
+				received_at_ms: 105
+			});
+			await expect(model.findLatestEvents({ installId: download.install_id })).resolves.toEqual([applied]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: {
+					kind: "installationMovement",
+					installId: download.install_id
+				},
+				beforeReceivedAtMs: 200,
+				limit: 10
+			}), [
+				applied,
+				replacement,
+				{
+					...download,
+					id: createBundleEventRowFixture("983", 105).id,
+					received_at_ms: 105
+				},
+				download
+			]);
+		});
+		it("treats duplicate IDs as complete no-ops, including changed retry payloads", async () => {
+			const model = state.getDatabase();
+			const event = createBundleEventRowFixture("901", 100);
+			await Promise.all([
+				record(model, event),
+				record(model, event),
+				record(model, event)
+			]);
+			await record(model, event);
+			const changed = {
+				...event,
+				received_at_ms: 300,
+				user_id: "changed-user"
+			};
+			await record(model, changed);
+			const otherInstallation = {
+				...changed,
+				install_id: "different-install"
+			};
+			await record(model, otherInstallation);
+			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([event]);
+			await expect(model.findLatestEvents({ installId: otherInstallation.install_id })).resolves.toEqual([]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 400,
+				limit: 10
+			}), [event]);
+		});
+		it("keeps all concurrent events and the greatest timestamp/ID state, including logout", async () => {
+			const model = state.getDatabase();
+			const older = {
+				...createBundleEventRowFixture("912", 100),
+				install_id: "concurrent",
+				user_id: "previous"
+			};
+			const tied = {
+				...createBundleEventRowFixture("910", 200),
+				install_id: "concurrent",
+				user_id: "previous"
+			};
+			const newest = {
+				...createBundleEventRowFixture("911", 200),
+				install_id: "concurrent",
+				user_id: null
+			};
+			await Promise.all([
+				record(model, newest),
+				record(model, older),
+				record(model, tied)
+			]);
+			await record(model, older);
+			await expect(model.findLatestEvents({ installId: "concurrent" })).resolves.toEqual([newest]);
+			await expect(model.findLatestEvents({
+				userId: "previous",
+				limit: 10
+			})).resolves.toEqual([]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 201,
+				limit: 10
+			}), [
+				newest,
+				tied,
+				older
+			]);
+		});
+		it("rejects invalid event metadata before persisting a report", async () => {
+			const model = state.getDatabase();
+			const event = createBundleEventRowFixture("920", 100);
+			await expect(model.recordEvent({ event: {
+				...event,
+				metadata: {
+					...event.metadata,
+					cohort: 123
+				}
+			} })).rejects.toMatchObject({ code: "invalid-data" });
+			await expect(model.findLatestEvents({ installId: event.install_id })).resolves.toEqual([]);
+			await expect(model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 200,
+				limit: 10
+			})).resolves.toEqual([]);
+		});
+		it("shares scoped list/count predicates, recovery attribution, and half-open time bounds", async () => {
+			const model = state.getDatabase();
+			const bundleA = createBundleEventRowFixture("1", 0).to_bundle_id;
+			const bundleB = createBundleEventRowFixture("2", 0).to_bundle_id;
+			const bundleC = createBundleEventRowFixture("3", 0).to_bundle_id;
+			const applied = {
+				...createBundleEventRowFixture("930", 100),
+				install_id: "target",
+				to_bundle_id: bundleB
+			};
+			const recovered = {
+				...createBundleEventRowFixture("931", 120),
+				install_id: "target",
+				type: "RECOVERED",
+				from_bundle_id: bundleB,
+				to_bundle_id: bundleA,
+				metadata: {
+					...createBundleEventRowFixture("931", 120).metadata,
+					update_strategy: "appVersion"
+				}
+			};
+			const unchanged = {
+				...createBundleEventRowFixture("932", 130),
+				type: "UNCHANGED",
+				from_bundle_id: null,
+				to_bundle_id: bundleB,
+				metadata: {
+					...createBundleEventRowFixture("932", 130).metadata,
+					update_strategy: null
+				}
+			};
+			const excluded = [
+				{
+					...applied,
+					id: createBundleEventRowFixture("933", 99).id,
+					install_id: "before",
+					received_at_ms: 99
+				},
+				{
+					...applied,
+					id: createBundleEventRowFixture("934", 200).id,
+					install_id: "after",
+					received_at_ms: 200
+				},
+				{
+					...applied,
+					id: createBundleEventRowFixture("935", 110).id,
+					install_id: "android",
+					platform: "android"
+				},
+				{
+					...applied,
+					id: createBundleEventRowFixture("936", 110).id,
+					install_id: "preview",
+					channel: "preview"
+				},
+				{
+					...recovered,
+					id: createBundleEventRowFixture("937", 125).id,
+					install_id: "other-source",
+					from_bundle_id: bundleC,
+					to_bundle_id: bundleB
+				}
+			];
+			for (const row of [
+				applied,
+				recovered,
+				unchanged,
+				...excluded
+			]) await record(model, row);
+			await expect(async () => record(model, {
+				...applied,
+				type: "RELEASE_ADOPTED"
+			})).rejects.toThrow();
+			await expect(async () => record(model, {
+				...applied,
+				type: "UNCHANGED",
+				from_bundle_id: bundleB,
+				metadata: {
+					...applied.metadata,
+					update_strategy: "appVersion"
+				}
+			})).rejects.toThrow();
+			await expect(model.findLatestEvents({ installId: "target" })).resolves.toEqual([recovered]);
+			const cases = [[{
+				platform: "ios",
+				channel: "production",
+				type: "UPDATE_APPLIED",
+				toBundleId: bundleB
+			}, applied], [{
+				platform: "ios",
+				channel: "production",
+				type: "RECOVERED",
+				fromBundleId: bundleB
+			}, recovered]];
+			for (const [filter, expected] of cases) {
+				await expectInsightsIndex(() => model.countEvents({
+					filter,
+					sinceMs: 100,
+					beforeReceivedAtMs: 200
+				}), 1);
+				await expectInsightsIndex(() => model.listEvents({
+					filter: {
+						kind: "bundle",
+						...filter
+					},
+					sinceMs: 100,
+					beforeReceivedAtMs: 200,
+					limit: 1
+				}), [expected]);
+			}
+			await expect(model.findLatestEvents({ installId: unchanged.install_id })).resolves.toEqual([unchanged]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				sinceMs: 100,
+				beforeReceivedAtMs: 200,
+				limit: 10
+			}), [
+				excluded[4],
+				recovered,
+				excluded[3],
+				excluded[2],
+				applied
+			]);
+			await expect(model.countEvents({
+				filter: {
+					platform: "ios",
+					channel: "production",
+					type: "UNCHANGED",
+					toBundleId: bundleB
+				},
+				sinceMs: 100,
+				beforeReceivedAtMs: 200
+			})).rejects.toThrow();
+			await expectInsightsIndex(() => model.countLatestEvents({
+				platform: "ios",
+				channel: "production",
+				sinceMs: 0,
+				bundle: [{
+					field: "to_bundle_id",
+					value: bundleA,
+					types: [
+						"UNCHANGED",
+						"UPDATE_APPLIED",
+						"RECOVERED"
+					]
+				}]
+			}), 1);
+			await expectInsightsIndex(() => model.countLatestEvents({
+				platform: "ios",
+				channel: "production",
+				sinceMs: 0
+			}), 5);
+			await expect(model.countLatestEvents({
+				platform: "ios",
+				channel: "production",
+				sinceMs: 100
+			})).rejects.toThrow();
+		});
+		it("uses exact identity and UTF-8 cursor order for user installations", async () => {
+			const model = state.getDatabase();
+			const ids = [
+				"Install-a",
+				"é",
+				"install-a",
+				"install-a ",
+				"é",
+				"",
+				"😀"
+			];
+			const events = ids.map((install_id, index) => ({
+				...createBundleEventRowFixture(String(950 + index), 100),
+				install_id,
+				user_id: "User-é"
+			}));
+			for (const event of events.toReversed()) await record(model, event);
+			const spacedUser = {
+				...createBundleEventRowFixture("960", 100),
+				install_id: "spaced-user-install",
+				user_id: "User-é "
+			};
+			await record(model, spacedUser);
+			await expectInsightsIndex(async () => {
+				const found = [];
+				let afterInstallId;
+				for (let pageIndex = 0; pageIndex <= ids.length; pageIndex++) {
+					const page = await model.findLatestEvents({
+						userId: "User-é",
+						afterInstallId,
+						limit: 2
+					});
+					found.push(...page.map((row) => row.install_id));
+					if (page.length < 2) return found;
+					const nextCursor = page[page.length - 1].install_id;
+					expect(nextCursor, "Insights cursor must advance").not.toBe(afterInstallId);
+					afterInstallId = nextCursor;
+				}
+				throw new Error("Insights pagination did not terminate");
+			}, ids);
+			await expectInsightsIndex(() => model.findLatestEvents({
+				userId: "User-é ",
+				limit: 10
+			}), [spacedUser]);
+			await expect(model.findLatestEvents({
+				userId: "user-é",
+				limit: 10
+			})).resolves.toEqual([]);
+			await expect(model.findLatestEvents({ installId: "INSTALL-a" })).resolves.toEqual([]);
+			await expect(model.findLatestEvents({ installId: "Install-a" })).resolves.toEqual([events[0]]);
+			await expect(model.findLatestEvents({ installId: "install-a " })).resolves.toEqual([events[3]]);
+			await expect(model.findLatestEvents({ installId: "install-a" })).resolves.toEqual([events[2]]);
+		});
+		it("counts overlapping bundle predicates once per latest installation", async () => {
+			const model = state.getDatabase();
+			const event = createBundleEventRowFixture("9700", 100);
+			await record(model, event);
+			const predicate = {
 				field: "to_bundle_id",
-				value: "bundle-b",
-				types: ["UPDATE_APPLIED"]
-			}]
-		}),
-		adapter: reads(0, 0, 1, 24),
-		engine: {
-			calls: 1,
-			rows: 6
-		},
-		check: (count) => expect(count).toBe(24)
-	}),
-	budget({
-		api: "release activity: buckets × shards, all used",
-		read: ({ insights }) => insights.getReleaseActivity({ releases: [{
-			releaseId: "release-b",
-			platform: "ios",
-			channel: "production"
-		}] }),
-		adapter: reads(0, 0, 1, 8),
-		engine: {
-			calls: 1,
-			rows: 1
-		},
-		check: ({ data }) => expect(data[0].metrics.launches).toBe(25)
-	}),
-	budget({
-		api: "release activity over a window: buckets × shards, all used",
-		read: ({ insights }) => insights.getReleaseActivity({
-			scope: {
+				value: event.to_bundle_id,
+				types: [event.type]
+			};
+			await expectInsightsIndex(() => model.countLatestEvents({
+				platform: event.platform,
+				channel: event.channel,
+				sinceMs: 0,
+				bundle: [predicate, predicate]
+			}), 1);
+		});
+		it("counts a latest installation once when a from and a to predicate both match it", async () => {
+			const model = state.getDatabase();
+			const moved = createBundleEventRowFixture("9701", 100);
+			await record(model, moved);
+			await expectInsightsIndex(() => model.countLatestEvents({
+				platform: moved.platform,
+				channel: moved.channel,
+				sinceMs: 0,
+				bundle: [{
+					field: "from_bundle_id",
+					value: moved.from_bundle_id,
+					types: [moved.type]
+				}, {
+					field: "to_bundle_id",
+					value: moved.to_bundle_id,
+					types: [moved.type]
+				}]
+			}), 1);
+		});
+		it("returns zero for successful empty scalar queries", async () => {
+			const model = state.getDatabase();
+			await expect(model.countLatestEvents({
+				platform: "ios",
+				channel: "production",
+				sinceMs: 0
+			})).resolves.toBe(0);
+			await expect(model.countEvents({
+				filter: {
+					platform: "ios",
+					channel: "production",
+					type: "RECOVERED",
+					fromBundleId: createBundleEventRowFixture("1", 0).to_bundle_id
+				},
+				sinceMs: 0,
+				beforeReceivedAtMs: 100
+			})).resolves.toBe(0);
+		});
+		it("maintains idempotent release, scope, usage, and latest-distribution summaries", async () => {
+			const model = state.getDatabase();
+			const releaseA = "00000000-0000-7000-8000-000000008001";
+			const releaseB = "00000000-0000-7000-8000-000000008002";
+			const download = {
+				...createBundleEventRowFixture("9801", 1e3),
+				type: "UPDATE_DOWNLOADED",
+				install_id: "summary-install-a",
+				from_release_id: releaseA,
+				to_release_id: releaseB
+			};
+			const appliedA = {
+				...download,
+				id: createBundleEventRowFixture("9802", 2e3).id,
+				type: "UPDATE_APPLIED",
+				received_at_ms: 2e3
+			};
+			const appliedB = {
+				...appliedA,
+				id: createBundleEventRowFixture("9803", 2100).id,
+				install_id: "summary-install-b",
+				received_at_ms: 2100
+			};
+			const recovered = {
+				...appliedA,
+				id: createBundleEventRowFixture("9804", 3e3).id,
+				type: "RECOVERED",
+				from_release_id: releaseB,
+				to_release_id: releaseA,
+				received_at_ms: 3e3
+			};
+			for (const event of [
+				download,
+				appliedA,
+				appliedB,
+				appliedB,
+				recovered
+			]) await record(model, event);
+			const releases = [{
+				releaseId: releaseA,
+				platform: "ios",
+				channel: "production"
+			}, {
+				releaseId: releaseB,
+				platform: "ios",
+				channel: "production"
+			}];
+			const lifetime = await model.getReleaseActivity({ releases });
+			expect(lifetime.data.map(({ metrics }) => metrics)).toEqual([{
+				downloads: 0,
+				launches: 1,
+				failedLaunches: 0
+			}, {
+				downloads: 1,
+				launches: 2,
+				failedLaunches: 1
+			}]);
+			const scope = await model.getReleaseActivity({
+				scope: {
+					platform: "ios",
+					channel: "production"
+				},
+				timeRange: {
+					start: 0,
+					end: 36e5
+				}
+			});
+			expect(scope.data[0]?.metrics).toMatchObject({
+				downloads: 1,
+				launches: 3,
+				failedLaunches: 1,
+				uniqueUsers: 2
+			});
+			const usage = await model.getAppUsage({
+				channel: "production",
+				platform: "all",
+				timeRange: {
+					start: 0,
+					end: 36e5
+				},
+				intervalMs: 36e5
+			});
+			expect(usage.activeInstallations).toBe(2);
+			expect(usage.points).toEqual([{
+				startMs: 0,
+				installations: 2
+			}]);
+			expect(usage.bundleDistribution).toEqual(expect.arrayContaining([{
+				appVersion: "1.0.0",
+				platform: "ios",
+				releaseId: releaseA,
+				installations: 1
+			}, {
+				appVersion: "1.0.0",
+				platform: "ios",
+				releaseId: releaseB,
+				installations: 1
+			}]));
+		});
+		it("pages insights events newest first with a stable cursor", async () => {
+			const model = state.getDatabase();
+			const first = createBundleEventRowFixture("701", 100);
+			const second = createBundleEventRowFixture("702", 100);
+			const third = createBundleEventRowFixture("703", 200);
+			await model.recordEvent({ event: third });
+			await model.recordEvent({ event: second });
+			await model.recordEvent({ event: first });
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 201,
+				limit: 2
+			}), [third, second]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				after: {
+					receivedAtMs: second.received_at_ms,
+					id: second.id
+				},
+				beforeReceivedAtMs: 201,
+				limit: 2
+			}), [first]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 200,
+				limit: 10
+			}), [second, first]);
+		});
+		it("filters installation movements before applying the page limit", async () => {
+			const model = state.getDatabase();
+			const unchanged = {
+				...createBundleEventRowFixture("711", 300),
+				type: "UNCHANGED",
+				install_id: "install-target",
+				from_bundle_id: null,
+				metadata: {
+					...createBundleEventRowFixture("711", 300).metadata,
+					update_strategy: null
+				}
+			};
+			const unrelated = createMovementEvent("712", 250, "UPDATE_APPLIED", "install-other");
+			const applied = createMovementEvent("713", 200, "UPDATE_APPLIED", "install-target");
+			const recovered = createMovementEvent("714", 100, "RECOVERED", "install-target");
+			for (const row of [
+				unchanged,
+				unrelated,
+				applied,
+				recovered
+			]) await model.recordEvent({ event: row });
+			await expectInsightsIndex(() => model.listEvents({
+				filter: {
+					kind: "installationMovement",
+					installId: "install-target"
+				},
+				beforeReceivedAtMs: 301,
+				limit: 1
+			}), [applied]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: {
+					kind: "installationMovement",
+					installId: "install-target"
+				},
+				after: {
+					receivedAtMs: applied.received_at_ms,
+					id: applied.id
+				},
+				beforeReceivedAtMs: 301,
+				limit: 1
+			}), [recovered]);
+		});
+		it("lists an update failure where its target's list and installation history read it, and a failed check in no bundle list, moving no latest event", async () => {
+			const model = state.getDatabase();
+			const applied = createMovementEvent("721", 100, "UPDATE_APPLIED", "install-failing");
+			const failure = (suffix, receivedAtMs, failed) => ({
+				...applied,
+				id: createBundleEventRowFixture(suffix, 0).id,
+				type: "UPDATE_FAILED",
+				from_bundle_id: applied.to_bundle_id,
+				to_bundle_id: failed.stage === "check" ? applied.to_bundle_id : createBundleEventRowFixture("729", 0).to_bundle_id,
+				metadata: {
+					...applied.metadata,
+					failure: failed
+				},
+				received_at_ms: receivedAtMs
+			});
+			const download = failure("722", 200, {
+				stage: "download",
+				reason: "http",
+				http_status: 403,
+				origin_code: "AccessDenied"
+			});
+			const check = failure("723", 300, {
+				stage: "check",
+				reason: "http"
+			});
+			for (const event of [
+				applied,
+				download,
+				check
+			]) await record(model, event);
+			await expect(model.findLatestEvents({ installId: "install-failing" })).resolves.toEqual([applied]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: {
+					kind: "installationMovement",
+					installId: "install-failing"
+				},
+				beforeReceivedAtMs: 301,
+				limit: 10
+			}), [
+				check,
+				download,
+				applied
+			]);
+			await expectInsightsIndex(() => model.listEvents({
+				filter: { kind: "all" },
+				beforeReceivedAtMs: 301,
+				limit: 10
+			}), [
+				check,
+				download,
+				applied
+			]);
+			const scope = {
 				platform: "ios",
 				channel: "production"
-			},
-			timeRange: {
-				start: T0,
-				end: T0 + 3 * DAY
+			};
+			for (const [toBundleId, listed] of [[download.to_bundle_id, [download]], [check.to_bundle_id, []]]) {
+				const filter = {
+					...scope,
+					type: "UPDATE_FAILED",
+					toBundleId
+				};
+				await expectInsightsIndex(() => model.listEvents({
+					filter: {
+						kind: "bundle",
+						...filter
+					},
+					beforeReceivedAtMs: 301,
+					limit: 10
+				}), listed);
+				await expect(model.countEvents({
+					filter,
+					sinceMs: 0,
+					beforeReceivedAtMs: 301
+				})).resolves.toBe(listed.length);
 			}
-		}),
-		adapter: reads(0, 0, 2, 24),
-		engine: {
-			calls: 2,
-			rows: 4
-		},
-		check: ({ data }) => expect(data[0].metrics.launches).toBe(25)
-	}),
-	budget({
-		api: "app usage: nonzero distribution and usage-sketch rows in the window, all used",
-		read: ({ insights }) => insights.getAppUsage({
-			channel: "production",
-			platform: "all",
-			timeRange: {
-				start: T0,
-				end: T0 + 3 * DAY
-			},
-			intervalMs: DAY
-		}),
-		adapter: reads(0, 0, 3, 39),
-		engine: {
-			calls: 3,
-			rows: 8
-		},
-		check: ({ versions }) => expect(versions).toEqual([{
-			name: "1.0.0",
-			installations: 24
-		}])
-	}),
-	budget({
-		api: "catalog compile: the scope's enabled releases, all used",
-		read: ({ core }) => core.deploy([{
-			bundle: bundleOf("107"),
-			release: production
-		}]),
-		adapter: (copies) => reads(copies ? 5 : 3, copies ? 8 : 3, 3, 6),
-		engine: {
-			calls: 6,
-			rows: 9
-		},
-		writes: 1
-	}),
-	budget({
-		api: "channel insert: 1 write, after the name's read finds nothing",
-		read: ({ core }) => core.ensureChannel("read-budgets"),
-		adapter: reads(0, 0, 1, 0),
-		engine: {
-			calls: 1,
-			rows: 0
-		},
-		writes: 1
-	}),
-	budget({
-		api: "channel delete: 1 read and 1 write",
-		read: ({ core, nightlyId }) => core.deleteChannel(nightlyId),
-		adapter: reads(1, 1, 0, 0),
-		engine: {
-			calls: 1,
-			rows: 1
-		},
-		writes: 1,
-		check: (result) => expect(result).toEqual({ deleted: true })
-	}),
-	budget({
-		api: "record an insights event: 2 dependent rounds of batch gets and 1 write",
-		read: ({ insights }) => insights.recordEvent(eventOf(26, {
-			install_id: "install-2",
-			received_at_ms: T0 + 3 * HOUR
-		})),
-		adapter: reads(5, 21, 0, 0),
-		engine: {
-			calls: 2,
-			rows: 1
-		},
-		writes: 1
-	})
-];
+		});
+	});
+};
+//#endregion
+//#region src/insights/setupInsightsHttpTestSuite.ts
+const jsonRequest$1 = (method, body) => ({
+	method,
+	headers: { "content-type": "application/json" },
+	body: JSON.stringify(body)
+});
 /**
-* The read-budget suite (PRD S4) on one backend: core and the built-in
-* plugins in verify mode over the backend's adapter, native pages capped at
-* two rows. Every API in the read-budget list reads exactly its budget at the
-* adapter and at the engine; with `examined`, the database examines no more
-* rows than the adapter read, within the backend's native multipliers.
+* The Insights plugin's routes on a database: a client reports an event, and
+* the admin routes read it back. The server must run `insights()`.
 */
-const setupReadBudgetTestSuite = (options) => {
-	describe(`${options.name} read budgets`, () => {
-		let created;
-		let database;
-		let seeded;
-		let writes = 0;
-		beforeAll(async () => {
-			created = await options.createAdapter({
-				tables: options.server.builtInSchema.tables,
-				nativePageSize: NATIVE_PAGE_SIZE
+const setupInsightsHttpTestSuite = (options) => {
+	describe("Insights HTTP routes", () => {
+		it("records a reported event and reads it back", async () => {
+			const client = options.getClient();
+			const installId = `install-${crypto.randomUUID()}`;
+			const userId = `user-${crypto.randomUUID()}`;
+			const channel = `insights-${crypto.randomUUID()}`;
+			const event = {
+				appVersion: "1.0.0",
+				channel,
+				cohort: "default",
+				fingerprintHash: null,
+				fromBundleId: null,
+				fromReleaseId: null,
+				installId,
+				platform: "ios",
+				toBundleId: "00000000-0000-7000-8000-000000000001",
+				toReleaseId: null,
+				type: "UNCHANGED",
+				updateStrategy: null,
+				userId,
+				sdkVersion: "2.0.0"
+			};
+			const reported = await client.client("/events", jsonRequest$1("POST", event));
+			expect(reported.status).toBe(204);
+			await reported.text();
+			const installation = await client.admin(`/installations/${encodeURIComponent(installId)}`);
+			expect(installation.status).toBe(200);
+			expect(await installation.json()).toMatchObject({
+				installId,
+				latestStatus: "UNCHANGED",
+				lastKnownBundleId: event.toBundleId,
+				channel
 			});
-			const { adapter } = created;
-			database = options.server.createMeasuredDatabase({
-				...adapter,
-				write: (ops) => {
-					writes += 1;
-					return adapter.write(ops);
+			await expectInsightsIndex(async () => {
+				return (await (await client.admin(`/installations?userId=${encodeURIComponent(userId)}`)).json()).data.map(({ installId: id }) => id);
+			}, [installId]);
+			await expectInsightsIndex(async () => {
+				return (await (await client.admin(`/overview?platform=ios&channel=${encodeURIComponent(channel)}&window=24h`)).json()).reportingInstallations.count;
+			}, 1);
+		});
+		it("records an update failure in installation history and the failures read", async () => {
+			const client = options.getClient();
+			const installId = `install-${crypto.randomUUID()}`;
+			const channel = `insights-${crypto.randomUUID()}`;
+			const releaseId = "00000000-0000-7000-8000-0000000000b2";
+			const reported = await client.client("/events", jsonRequest$1("POST", {
+				appVersion: "1.0.0",
+				channel,
+				cohort: "default",
+				fingerprintHash: null,
+				fromBundleId: "00000000-0000-7000-8000-000000000001",
+				fromReleaseId: null,
+				installId,
+				platform: "ios",
+				toBundleId: "00000000-0000-7000-8000-000000000002",
+				toReleaseId: releaseId,
+				type: "UPDATE_FAILED",
+				updateStrategy: "appVersion",
+				metadata: { failure: {
+					stage: "download",
+					reason: "http",
+					httpStatus: 403
+				} }
+			}));
+			expect(reported.status).toBe(204);
+			await reported.text();
+			await expectInsightsIndex(async () => {
+				return (await (await client.admin(`/installations/${encodeURIComponent(installId)}/events?limit=10`)).json()).data.map(({ type, failure }) => ({
+					type,
+					failure
+				}));
+			}, [{
+				type: "UPDATE_FAILED",
+				failure: {
+					stage: "download",
+					reason: "http",
+					httpStatus: 403
 				}
-			}, options.server.plugins, {
-				now: () => T0 + 10 * DAY,
-				storage
-			});
-			seeded = await seed(database, options.server);
-		}, 3e5);
-		afterAll(async () => {
-			await created?.cleanup?.();
+			}]);
+			const now = Date.now();
+			await expectInsightsIndex(async () => {
+				const body = await (await client.admin(`/failures?platform=ios&channel=${encodeURIComponent(channel)}&releaseId=${releaseId}&start=${now - 864e5}&end=${now + 36e5}`)).json();
+				return [body.failedUpdates, body.failedInstallations];
+			}, [1, 1]);
 		});
-		for (const budget of READ_BUDGETS) it(budget.api, async () => {
-			const { examined, indexCopies = false } = created;
-			writes = 0;
-			examined?.reset();
-			const measured = await database.measureReads(() => budget.read(seeded));
-			const adapter = typeof budget.adapter === "function" ? budget.adapter(indexCopies) : budget.adapter;
-			expect({
-				adapter: measured.adapter,
-				engine: measured.engine
-			}).toEqual({
-				adapter,
-				engine: budget.engine
-			});
-			expect(writes, "writes").toBe(budget.writes ?? 0);
-			if (budget.returned) expect(budget.returned(measured.result), "rows returned").toBe(measured.engine.rows);
-			budget.check?.(measured.result);
-			if (examined) {
-				const { gets, keys, queries, rows } = measured.adapter;
-				expect(await examined.total(), "rows examined").toBeLessThanOrEqual((examined.perRow ?? 1) * (keys + rows) + (examined.perRead ?? 0) * (gets + queries));
-			}
+		it("refuses a malformed event", async () => {
+			const response = await options.getClient().client("/events", jsonRequest$1("POST", { type: "UNCHANGED" }));
+			expect(response.status).toBe(400);
+			await response.text();
 		});
 	});
 };
 //#endregion
-//#region src/sqlRowsExamined.ts
-/** Wraps executors so each read they run while counting is examined first. */
-const examineReads = (hooks) => {
-	let counting = false;
-	let examined = 0;
-	return {
-		/** The executor, examining each SELECT it runs outside a transaction. */
-		wrap: (executor) => ({
-			...executor,
-			async execute(statement) {
-				if (counting && /^\s*SELECT\b/iu.test(statement.sql)) {
-					const rows = await hooks.examine(statement);
-					examined += rows;
-				}
-				return executor.execute(statement);
-			}
-		}),
-		examined: {
-			reset() {
-				counting = true;
-				examined = 0;
-				hooks.onReset?.();
-			},
-			async total() {
-				counting = false;
-				return examined;
-			}
-		}
-	};
-};
-/** Rows each table read of a plan examined: rows it produced, filtered out, or rechecked away, over all its loops. */
-const postgresTableReads = (node, reads = /* @__PURE__ */ new Map()) => {
-	const relation = node["Relation Name"];
-	if (relation !== void 0) {
-		const table = node.Alias ?? relation;
-		const rows = (node["Actual Rows"] ?? 0) + (node["Rows Removed by Filter"] ?? 0) + (node["Rows Removed by Index Recheck"] ?? 0);
-		reads.set(table, (reads.get(table) ?? 0) + rows * (node["Actual Loops"] ?? 0));
-	}
-	for (const child of node.Plans ?? []) postgresTableReads(child, reads);
-	return reads;
-};
-/**
-* Planner settings under which a test's small tables plan as production-sized
-* ones: no sequential scan, which only a small table affords, and an index
-* entry weighted like a row, so a plan reads no more entries than the read
-* needs, as a large index forces.
-*/
-const POSTGRES_PLANNER = ["enable_seqscan = off", "cpu_index_tuple_cost = 1"];
+//#region src/insights/setupInsightsModelTestSuite.ts
 /**
-* Rows examined on PostgreSQL (PGlite or a server). Each SELECT a wrapped
-* executor runs is first run under `EXPLAIN (ANALYZE, FORMAT JSON)` on
-* `query`, one session with the planner settings above; each `reset` first
-* vacuums and analyzes, as autovacuum keeps a production database. A plan
-* then takes the index path a production-sized table takes, and a read no
-* index serves still scans. A statement counts the rows its busiest table
-* read examined, so an exact plan counts the rows it returns, a multi-valued
-* index's own table included.
+* The Insights report contract on one database: pass the Insights plugin's
+* model over it, `createInsightsModel(createHotUpdater({ database, plugins:
+* [insights()], clientAccess: "public" }).api.insights)`, as `createDatabase`.
 */
-const postgresRowsExamined = (query) => {
-	let planner;
-	let stale = true;
-	return examineReads({
-		onReset: () => {
-			stale = true;
-		},
-		async examine({ sql, params }) {
-			planner ??= (async () => {
-				for (const setting of POSTGRES_PLANNER) await query(`SET ${setting}`, []);
-			})();
-			await planner;
-			if (stale) {
-				stale = false;
-				await query("VACUUM ANALYZE", []);
-			}
-			const [row] = await query(`EXPLAIN (ANALYZE, FORMAT JSON) ${sql}`, params);
-			const output = row?.["QUERY PLAN"];
-			const [plan] = typeof output === "string" ? JSON.parse(output) : output;
-			return Math.max(0, ...postgresTableReads(plan.Plan).values());
-		}
+const setupInsightsModelTestSuite = (lifecycle) => {
+	describe(lifecycle.name, () => {
+		let model;
+		const getDatabase = () => {
+			if (model === void 0) throw new Error("The model is unavailable outside the test lifecycle");
+			return model;
+		};
+		beforeAll(async () => {
+			await lifecycle.migrate();
+			model = await lifecycle.createDatabase();
+		});
+		beforeEach(async () => {
+			await lifecycle.reset(getDatabase());
+		});
+		afterAll(async () => {
+			await lifecycle.dispose(getDatabase());
+			model = void 0;
+		});
+		registerInsightsModelTests({ getDatabase });
 	});
 };
+//#endregion
+//#region src/insights/index.ts
 /**
-* An `EXPLAIN ANALYZE` iterator that reads a table: its table, and its actual
-* rows and loops. A primary-key read of constants runs while MySQL plans the
-* statement, and names no table.
-*/
-const MYSQL_TABLE_READ = /-> (?:(?:Table scan|(?:Covering )?[Ii]ndex (?:scan|lookup|range scan|skip scan)|Single-row (?:covering )?index lookup|Multi-range index scan) on (\S+)|Rows fetched before execution).*\(actual time=[\d.e+-]+\.\.[\d.e+-]+ rows=([\d.e+-]+) loops=(\d+)\)/u;
-/**
-* Rows examined on MySQL. Each SELECT a wrapped executor runs is first run
-* under `EXPLAIN ANALYZE` on `query`, one session, after `ANALYZE TABLE` of
-* the tables it reads once per `reset`, and with multi-range reads always
-* on, so a secondary index's range is costed with sorted row reads, as a
-* production-sized table's is. A statement counts the rows its busiest table
-* read examined; a filter above a table read drops rows that read produced.
+* The Insights plugin's tests, for `setupDatabaseTestSuite`'s `plugins`: its
+* HTTP routes on the provider's server, which must run `insights()`, and
+* with `createModel` its report contract on the provider's database, such as
+* `(database) => createInsightsModel(createHotUpdater({ database, plugins:
+* [insights()], clientAccess: "public" }).api.insights)`.
 */
-const mysqlRowsExamined = (query) => {
-	let planner;
-	const analyzed = /* @__PURE__ */ new Set();
-	return examineReads({
-		onReset: () => {
-			analyzed.clear();
-		},
-		async examine({ sql, params }) {
-			planner ??= query("SET SESSION optimizer_switch = 'mrr=on,mrr_cost_based=off'", []);
-			await planner;
-			const tables = [...sql.matchAll(/(?:FROM|JOIN) (`[^`]+`)/gu)].map(([, table]) => table).filter((table) => !analyzed.has(table));
-			for (const table of tables) analyzed.add(table);
-			if (tables.length > 0) await query(`ANALYZE TABLE ${tables.join(", ")}`, []);
-			const [row] = await query(`EXPLAIN ANALYZE ${sql}`, params);
-			const reads = /* @__PURE__ */ new Map();
-			for (const line of String(Object.values(row ?? {})[0]).split("\n")) {
-				const read = MYSQL_TABLE_READ.exec(line);
-				if (read === null) continue;
-				const [, table = "", rows, loops] = read;
-				reads.set(table, (reads.get(table) ?? 0) + Number(rows) * Number(loops));
-			}
-			return Math.max(0, ...reads.values());
-		}
-	});
-};
-//#endregion
-//#region src/runContentionHarness.ts
-const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-/** Delays every adapter call by `ms`, like a round trip to a remote database. */
-const withAdapterLatency = (adapter, ms) => ({
-	...adapter,
-	get: async (table, keys) => {
-		await sleep(ms);
-		return adapter.get(table, keys);
-	},
-	query: async (table, request) => {
-		await sleep(ms);
-		return adapter.query(table, request);
-	},
-	write: async (ops) => {
-		await sleep(ms);
-		return adapter.write(ops);
+const insightsTestSuite = (options = {}) => ({
+	name: "Insights plugin",
+	register: (context) => {
+		setupInsightsHttpTestSuite({ getClient: context.getClient });
+		const { createModel } = options;
+		if (createModel !== void 0) describe("Insights model", () => {
+			registerInsightsModelTests({ getDatabase: () => createModel(context.getDatabase()) });
+		});
 	}
 });
-/**
-* Starts `transactions` runs at a steady arrival rate through a fixed pool and
-* reports how they ended. Retry counts come from the engine's `onRetry`.
-*/
-const runContentionHarness = async (options) => {
-	const started = Date.now();
-	const errors = {};
-	const waiting = [];
-	let free = options.concurrency;
-	let committed = 0;
-	const acquire = () => free > 0 ? (free -= 1, Promise.resolve()) : new Promise((resolve) => waiting.push(resolve));
-	const release = () => {
-		const next = waiting.shift();
-		if (next) next();
-		else free += 1;
-	};
-	await Promise.all(Array.from({ length: options.transactions }, async (_, index) => {
-		await sleep(index * 1e3 / options.ratePerSecond);
-		await acquire();
-		try {
-			await options.run(index);
-			committed += 1;
-		} catch (error) {
-			const name = error instanceof Error ? error.name : "unknown";
-			errors[name] = (errors[name] ?? 0) + 1;
-		} finally {
-			release();
-		}
-	}));
-	return {
-		transactions: options.transactions,
-		committed,
-		errors,
-		durationMs: Date.now() - started
-	};
-};
 //#endregion
-//#region src/createPluginTestHarness.ts
-const builtInPlugin = Symbol.for("@hot-updater/server/built-in-plugin");
+//#region src/kvTestStore.ts
 /**
-* Runs one plugin the way `createHotUpdater` does, on a memory adapter in
-* verify mode, so tests can call its API and measure what each call reads.
+* An in-memory key-value store that behaves like DynamoDB where the adapter
+* can tell: a write checks every condition against the state before it,
+* refuses two ops on one item, and applies all ops or none.
 */
-const createPluginTestHarness = async (plugin, options) => {
-	const adapter = options.adapter ?? createMemoryAdapter();
-	const module = {
-		id: plugin.id,
-		schema: plugin.schema,
-		...builtInPlugin in plugin ? {} : { namespace: plugin.id }
+const createMemoryKeyValueStore = (options = {}) => {
+	let partitions = /* @__PURE__ */ new Map();
+	let expiries = /* @__PURE__ */ new Map();
+	const read = (key) => partitions.get(key.pk)?.get(key.sk) ?? null;
+	const holds = (key, condition) => {
+		if (condition === void 0) return true;
+		const item = read(key);
+		return "v" in condition ? item !== null && item[DATABASE_VERSION_COLUMN] === condition.v : item !== null === condition.exists;
 	};
-	const schema = options.engine.resolveSchema([module]);
-	await adapter.migrations?.apply(schema.tables);
-	const engine = options.engine.createDatabaseEngine({
-		adapter,
-		schema,
-		verify: true
-	});
-	let clock = options.now ?? Date.now;
-	const db = engine.database(module);
-	const instance = plugin.init({
-		db,
-		core: {},
-		now: () => clock()
-	});
 	return {
-		api: instance.api,
-		instance,
-		/** The plugin's own database handle; cast it to its `HotUpdaterDatabase` type. */
-		db,
-		adapter,
-		tables: schema.tables,
-		/** Reads at both boundaries while `read` runs. */
-		measureReads: (read) => engine.measureReads(read),
-		setNow: (now) => {
-			clock = now;
+		id: "memory-kv",
+		limits: options.limits ?? {
+			items: 100,
+			bytes: 4e6
+		},
+		items: () => [...partitions.values()].reduce((sum, items) => sum + items.size, 0),
+		expiries: () => expiries,
+		async get(keys) {
+			return keys.map((key) => structuredClone(read(key)));
+		},
+		async query({ pk, gte, lt, order, limit, after }) {
+			const direction = order === "asc" ? 1 : -1;
+			const matching = [...partitions.get(pk) ?? /* @__PURE__ */ new Map()].filter(([sk]) => (gte === void 0 || compareUtf8(sk, gte) >= 0) && (lt === void 0 || compareUtf8(sk, lt) < 0) && (after === void 0 || direction * compareUtf8(sk, after) > 0)).sort(([left], [right]) => direction * compareUtf8(left, right));
+			const size = Math.min(limit, options.nativePageSize ?? limit);
+			return {
+				items: matching.slice(0, size).map(([sk, value]) => ({
+					sk,
+					value: structuredClone(value)
+				})),
+				more: matching.length > size
+			};
+		},
+		async write(ops) {
+			if (new Set(ops.map(({ key }) => JSON.stringify(key))).size !== ops.length) throw new Error("A write may touch each item once.");
+			const failed = ops.findIndex((op) => !holds(op.key, op.condition));
+			if (failed !== -1) return {
+				ok: false,
+				failedOp: failed
+			};
+			const next = new Map(partitions);
+			const stamped = new Map(expiries);
+			for (const op of ops) {
+				if (op.type === "check") continue;
+				const items = new Map(next.get(op.key.pk));
+				next.set(op.key.pk, items);
+				const id = JSON.stringify([op.key.pk, op.key.sk]);
+				if (op.type === "delete") {
+					items.delete(op.key.sk);
+					stamped.delete(id);
+				} else if (op.type === "put") {
+					items.set(op.key.sk, structuredClone(op.value));
+					if (op.expiresAt === void 0) stamped.delete(id);
+					else stamped.set(id, op.expiresAt);
+				} else {
+					if (!items.has(op.key.sk) && op.expiresAt !== void 0) stamped.set(id, op.expiresAt);
+					const item = structuredClone(items.get(op.key.sk) ?? op.init ?? {});
+					for (const [name, delta] of Object.entries(op.by)) item[name] = Number(item[name] ?? 0) + delta;
+					items.set(op.key.sk, item);
+				}
+			}
+			partitions = next;
+			expiries = stamped;
+			return { ok: true };
+		},
+		async deleteConsumed(keys) {
+			const next = new Map(partitions);
+			for (const { pk, sk } of keys) {
+				const items = new Map(next.get(pk));
+				items.delete(sk);
+				next.set(pk, items);
+				expiries.delete(JSON.stringify([pk, sk]));
+			}
+			partitions = next;
+		},
+		async dispose() {
+			partitions = /* @__PURE__ */ new Map();
+			expiries = /* @__PURE__ */ new Map();
 		}
 	};
 };
@@ -3615,4 +4962,4 @@ async function startHttpTestServer(handlers) {
 	};
 }
 //#endregion
-export { RELEASE_CATALOG_DOWNLOAD_HASH, RELEASE_CATALOG_MANIFEST_URIS, RELEASE_CATALOG_STORAGE_FIXTURES, conformanceCounters, conformanceItems, createAdminApiTestClient, createHandlerHttpTestClient, createHttpTestClient, createPluginTestHarness, createReleaseCatalogTestStorage, jsonRequest, mysqlRowsExamined, postgresRowsExamined, releaseCatalogArtifact, releaseCatalogDownloadUrl, runContentionHarness, setupBundleMethodsTestSuite, setupCoreAdminTestSuite, setupDatabaseAdapterConformanceSuite, setupDatabaseTestSuite, setupInsightsHttpTestSuite, setupInsightsModelTestSuite, setupReadBudgetTestSuite, setupReleaseCatalogTestSuite, setupSemverSatisfiesTestSuite, startHttpTestServer, toDeployBundle, withAdapterLatency };
+export { RELEASE_CATALOG_DOWNLOAD_HASH, RELEASE_CATALOG_MANIFEST_URIS, RELEASE_CATALOG_STORAGE_FIXTURES, conformanceCounters, conformanceExpiring, conformanceItems, createAdminApiTestClient, createBundleEventRowFixture, createBundleFixture, createBundlePatchRowFixture, createBundleRowFixture, createChannelRowFixture, createHandlerHttpTestClient, createHttpTestClient, createMeasuredDatabase, createMemoryKeyValueStore, createPluginTestHarness, createReleaseCatalogTestStorage, createReleaseRowFixture, expectInsightsIndex, insightsTestSuite, jsonRequest, mysqlRowsExamined, postgresRowsExamined, releaseCatalogArtifact, releaseCatalogDownloadUrl, runContentionHarness, setupAggregateBatchingTestSuite, setupBundleMethodsTestSuite, setupCoreAdminTestSuite, setupDatabaseAdapterConformanceSuite, setupDatabaseTestSuite, setupInsightsHttpTestSuite, setupInsightsModelTestSuite, setupReadBudgetTestSuite, setupReleaseCatalogTestSuite, setupSemverSatisfiesTestSuite, setupStorageAdapterTestSuite, startHttpTestServer, storeBundles, toDeployBundle, withAdapterLatency };