@voltro/plugin-releases 0.85.0 → 0.87.0

package/dist/index.js

@@ -1,212 +1,20 @@
-import { ReleaseNotFound as e, ReleaseRefused as t } from "./errors.js";
-import { a as n, i as r, n as i, o as a, r as o, s, t as c } from "./rollout-CGRKMTfv.js";
-import { _ as l, a as u, c as ee, d as te, f as ne, g as d, h as f, l as re, m as ie, o as ae, p as oe, r as p, s as se, t as m, u as ce, v as h, y as g } from "./rpc-DrfZqJIA.js";
-import { Effect as _, Result as v, Schema as le } from "effect";
-import { randomBytes as y } from "node:crypto";
-import { AsyncLocalStorage as b } from "node:async_hooks";
-import { definePlugin as ue } from "@voltro/protocol";
-import { and as de, boolean as x, eq as S, id as C, inSet as fe, integer as w, json as T, queryFor as E, registerRetention as pe, retentionTtlMsFromEnv as me, table as D, text as O, timestamp as k } from "@voltro/database";
-import { newTraceId as he } from "@voltro/runtime";
-var ge = (e, t, n) => {
-	let r = /* @__PURE__ */ new Set();
-	for (let e of t) e.currentReleaseId !== null && r.add(e.currentReleaseId);
-	let i = [];
-	for (let a of t) {
-		let t = n(a.name), o = Number.isFinite(t) ? Math.max(1, Math.floor(t)) : 10, s = e.filter((e) => e.channelId === a.id).sort((e, t) => c(t.version, e.version));
-		for (let e of s.slice(o)) r.has(e.id) || i.push(e);
-	}
-	return i;
-}, A = [
-	"web",
-	"ios",
-	"android",
-	"macos",
-	"windows",
-	"linux"
-], j = [
-	"pwa",
-	"expo",
-	"tauri",
-	"electron"
-], M = D(d, {
-	id: C({ prefix: "relapp" }),
-	app: O(),
-	platform: O(),
-	shell: O(),
-	revision: w().default(0),
-	bundleId: O().nullable(),
-	updaterPublicKey: O().nullable(),
-	runtimeVersion: O().nullable(),
-	createdAt: k().default("now")
-}).index("byReleaseAppTarget", [
-	"app",
-	"platform",
-	"shell"
-]), N = D(h, {
-	id: C({ prefix: "relch" }),
-	appId: O(),
-	name: O(),
-	currentReleaseId: O().nullable(),
-	minSupportedVersion: O().nullable(),
-	killSwitches: T().nullable(),
-	public: x().default(!1),
-	allowUnsigned: x().default(!1),
-	updatedAt: k().default("now").onUpdate("now")
-}).index("byReleaseChannelApp", ["appId", "name"]), P = D(f, {
-	id: C({ prefix: "rel" }),
-	appId: O(),
-	channelId: O(),
-	version: O(),
-	buildId: O().nullable(),
-	notes: O().nullable(),
-	state: O().default("draft"),
-	rolloutPercent: w().default(0),
-	rolloutSalt: O(),
-	cohorts: T().nullable(),
-	createdBy: O().nullable(),
-	createdAt: k().default("now"),
-	updatedAt: k().default("now").onUpdate("now")
-}).index("byReleaseAppChannel", ["appId", "channelId"]).index("byReleaseVersion", ["appId", "version"]), F = D(l, {
-	id: C({ prefix: "relart" }),
-	releaseId: O(),
-	kind: O(),
-	target: O().nullable(),
-	url: O(),
-	sha256: O(),
-	size: w(),
-	signature: O().nullable(),
-	notarized: x().default(!1),
-	assetKey: O().nullable(),
-	contentType: O().nullable(),
-	createdAt: k().default("now")
-}).index("byReleaseArtifactRelease", ["releaseId"]), I = D(g, {
-	id: C({ prefix: "relev" }),
-	appId: O(),
-	channelId: O().nullable(),
-	releaseId: O().nullable(),
-	kind: O(),
-	reason: O().nullable(),
-	actorId: O().nullable(),
-	detail: T().nullable(),
-	at: k().default("now")
-}).index("byReleaseEventApp", ["appId", "at"]), L = [
-	M,
-	N,
-	P,
-	F,
-	I
-], R = (e, t) => t.currentVersion !== null && c(e.version, t.currentVersion) <= 0 ? !1 : o({
-	installId: t.installId,
-	salt: e.rolloutSalt,
-	percent: e.rolloutPercent,
-	...t.cohorts === void 0 ? {} : { installCohorts: t.cohorts },
-	releaseCohorts: e.cohorts
-}), z = (e, t) => {
-	if (!R(e, t)) return null;
-	let n = e.artifacts.find((e) => e.target === t.target && e.signature !== null);
-	return !n || n.signature === null ? null : {
-		version: e.version,
-		notes: e.notes ?? "",
-		pub_date: e.createdAt.toISOString(),
-		platforms: { [t.target]: {
-			signature: n.signature,
-			url: n.url
-		} }
-	};
-}, B = (e, t, n = {}) => {
-	let r = {
-		win: [
-			"nsis",
-			"msi",
-			"exe"
-		],
-		mac: ["dmg", "zip"],
-		linux: [
-			"appimage",
-			"deb",
-			"rpm"
-		]
-	}, i = e.artifacts.filter((e) => r[t].includes(e.kind));
-	if (i.length === 0) return null;
-	let a = [`version: ${e.version}`, "files:"];
-	for (let e of i) {
-		a.push(`  - url: ${e.url}`);
-		let t = n[e.sha256];
-		a.push(t === void 0 ? `    sha256: ${e.sha256}` : `    sha512: ${t}`), a.push(`    size: ${e.size}`);
-	}
-	let o = i[0];
-	a.push(`path: ${o.url}`);
-	let s = n[o.sha256];
-	return a.push(s === void 0 ? `sha256: ${o.sha256}` : `sha512: ${s}`), a.push(`releaseDate: '${e.createdAt.toISOString()}'`), e.notes && a.push(`releaseNotes: ${JSON.stringify(e.notes)}`), a.join("\n") + "\n";
-}, _e = (e, t, n) => {
-	if (n.rolledBackTo !== null) return {
-		kind: "rollback",
-		commitTime: n.rolledBackTo.commitTime.toISOString()
-	};
-	if (e === null || n.runtimeVersion !== null && n.runtimeVersion !== t.runtimeVersion) return { kind: "no-update" };
-	let r = e.buildId ?? e.id;
-	if (t.currentUpdateId === r || !R(e, {
-		installId: t.installId,
-		currentVersion: null,
-		...t.cohorts === void 0 ? {} : { cohorts: t.cohorts }
-	})) return { kind: "no-update" };
-	let i = e.artifacts.find((e) => e.kind === "expo-bundle" && e.target === t.platform);
-	if (!i) return { kind: "no-update" };
-	let a = e.artifacts.filter((e) => e.kind === "expo-asset" && (e.target === null || e.target === t.platform)).map((e) => ({
-		hash: e.sha256,
-		key: e.assetKey ?? e.sha256,
-		contentType: e.contentType ?? "application/octet-stream",
-		url: e.url
-	}));
-	return {
-		kind: "manifest",
-		manifest: {
-			id: r,
-			createdAt: e.createdAt.toISOString(),
-			runtimeVersion: t.runtimeVersion,
-			launchAsset: {
-				hash: i.sha256,
-				key: i.assetKey ?? "bundle",
-				contentType: i.contentType ?? "application/javascript",
-				url: i.url
-			},
-			assets: a,
-			metadata: {},
-			extra: {
-				version: e.version,
-				...e.notes ? { notes: e.notes } : {}
-			}
-		}
-	};
-}, ve = {
-	macos: ["dmg", "zip"],
-	windows: [
-		"nsis",
-		"msi",
-		"exe"
-	],
-	linux: [
-		"appimage",
-		"deb",
-		"rpm"
-	],
-	ios: ["ipa"],
-	android: ["apk", "aab"]
-}, V = (e, t, n) => {
-	let r = ve[t] ?? [], i = e.artifacts.filter((e) => r.includes(e.kind));
-	if (i.length === 0) return null;
-	if (n !== void 0) {
-		let e = i.find((e) => e.target !== null && e.target.endsWith(n));
-		if (e) return e;
-	}
-	return i[0];
-}, H = (e) => /Windows/i.test(e) ? {
-	os: "windows",
-	arch: /ARM64|aarch64/i.test(e) ? "aarch64" : "x86_64"
-} : /Macintosh|Mac OS X/i.test(e) ? { os: "macos" } : /Android/i.test(e) ? { os: "android" } : /iPhone|iPad|iPod/i.test(e) ? { os: "ios" } : /Linux/i.test(e) ? {
-	os: "linux",
-	arch: /aarch64|arm64/i.test(e) ? "aarch64" : "x86_64"
-} : null, U = (e, t, n = {}) => ({
+import { artifactMetadataIssue as e, artifactOperationId as t, artifactStoredSize as n, hasArtifactSignature as r } from "./artifactMetadata.js";
+import { matchesUploadArtifact as i, uploadArtifactId as a } from "./uploadIdentity.server.js";
+import { ReleaseNotFound as o, ReleaseRefused as s } from "./errors.js";
+import { compareVersions as c, evaluatePolicy as l, inRollout as u, isNewerVersion as d, parseVersion as f, rolloutBucket as p, sortVersionsDesc as ee } from "./rollout.js";
+import { planRetention as te } from "./retention.js";
+import { RELEASES_TABLE as m, RELEASE_APPS_TABLE as ne, RELEASE_ARTIFACTS_TABLE as h, RELEASE_CHANNELS_TABLE as g, RELEASE_EVENTS_TABLE as _ } from "./names.js";
+import { BASE_NAME as v, RELEASES_MANAGE_SCOPE as y, createDescriptor as re, listDescriptor as ie, policyDescriptor as ae, prepareUploadDescriptor as oe, promoteDescriptor as se, registerAppDescriptor as ce, releasesRpcClientImports as le, rollbackDescriptor as ue, rolloutDescriptor as de, setPolicyDescriptor as fe, uploadDescriptor as pe } from "./rpc.js";
+import { RELEASE_PLATFORMS as b, RELEASE_SHELLS as x, releaseAppsTable as S, releaseArtifactsTable as C, releaseChannelsTable as w, releaseEventsTable as me, releaseTables as he, releasesTable as T } from "./schema.js";
+import { offeredTo as ge, osFromUserAgent as _e, pickDownload as ve, renderElectronLatestYml as ye, renderExpoFeed as be, renderTauriFeed as xe } from "./feeds.js";
+import { Effect as E, Result as D, Schema as Se } from "effect";
+import { randomBytes as Ce } from "node:crypto";
+import { AsyncLocalStorage as we } from "node:async_hooks";
+import { definePlugin as Te } from "@voltro/protocol";
+import { and as Ee, eq as O, inSet as De, queryFor as k, registerRetention as Oe, retentionTtlMsFromEnv as ke } from "@voltro/database";
+import { newTraceId as Ae } from "@voltro/runtime";
+//#region src/index.ts
+var A = (e, t, n = {}) => ({
 	status: e,
 	body: JSON.stringify(t),
 	contentType: "application/json; charset=utf-8",
@@ -214,25 +22,25 @@ var ge = (e, t, n) => {
 		"cache-control": "no-store",
 		...n
 	}
-}), ye = (e, t, n) => ({
+}), je = (e, t, n) => ({
 	status: e,
 	body: t,
 	contentType: n,
 	headers: { "cache-control": "no-store" }
-}), W = (e) => ({
+}), j = (e) => ({
 	status: e,
 	body: "",
 	headers: { "cache-control": "no-store" }
-}), G = (e) => `${e}_${y(9).toString("base64url")}`, be = (n) => {
-	let r = (n.prefix ?? "/releases").replace(/\/+$/, ""), a = n.now ?? Date.now, o, s = new b(), p = new b(), y = () => {
-		let e = s.getStore();
+}), M = (e) => `${e}_${Ce(9).toString("base64url")}`, N = (u) => {
+	let d = (u.prefix ?? "/releases").replace(/\/+$/, ""), f = u.now ?? Date.now, p, ee = new we(), y = new we(), b = () => {
+		let e = ee.getStore();
 		if (e) return e;
-		if (!o) throw new t({ reason: "releases: the app store is not bound yet" });
-		return o;
-	}, x = null, C = async (e) => {
-		let t = (await y().query(E(M).where(S("app", e.app)).descriptor)).find((t) => t.platform === e.platform && t.shell === e.shell), n = !t;
-		t ||= await y().insert(d, {
-			id: G("relapp"),
+		if (!p) throw new s({ reason: "releases: the app store is not bound yet" });
+		return p;
+	}, x = null, ge = async (e) => {
+		let t = (await b().query(k(S).where(O("app", e.app)).descriptor)).find((t) => t.platform === e.platform && t.shell === e.shell), n = !t;
+		t ||= await b().insert(ne, {
+			id: M("relapp"),
 			app: e.app,
 			platform: e.platform,
 			shell: e.shell,
@@ -240,15 +48,15 @@ var ge = (e, t, n) => {
 			bundleId: e.bundleId ?? null,
 			updaterPublicKey: e.updaterPublicKey ?? null,
 			runtimeVersion: e.runtimeVersion ?? null,
-			createdAt: new Date(a())
+			createdAt: new Date(f())
 		});
-		let r = await y().query(E(N).where(S("appId", t.id)).descriptor);
+		let r = await b().query(k(w).where(O("appId", t.id)).descriptor);
 		for (let n of e.channels ?? [
 			"stable",
 			"beta",
 			"internal"
-		]) r.some((e) => e.name === n) || await y().insert(h, {
-			id: G("relch"),
+		]) r.some((e) => e.name === n) || await b().insert(g, {
+			id: M("relch"),
 			appId: t.id,
 			name: n,
 			currentReleaseId: null,
@@ -256,40 +64,43 @@ var ge = (e, t, n) => {
 			killSwitches: null,
 			public: n === "stable",
 			allowUnsigned: n === "internal",
-			updatedAt: new Date(a())
+			updatedAt: new Date(f())
 		});
 		return {
 			row: t,
 			created: n
 		};
-	}, w = async () => {
-		for (let e of n.apps) await C(e);
-	}, T = () => x ?? Promise.resolve(), D = (t, n, r) => _.tryPromise({
+	}, Ce = async () => {
+		for (let e of u.apps) await ge(e);
+	}, N = () => x ?? Promise.resolve(), P = (e, t, n) => E.tryPromise({
 		try: async () => {
-			await T();
-			let i = await y().query(E(M).where(S("app", t)).descriptor), a = p.getStore(), o = i.find((e) => (a === void 0 || e.id === a) && (n === void 0 || e.platform === n) && (r === void 0 || e.shell === r));
-			if (!o) throw new e({ app: t });
-			return o;
+			await N();
+			let r = await b().query(k(S).where(O("app", e)).descriptor), i = y.getStore(), a = r.find((e) => (i === void 0 || e.id === i) && (t === void 0 || e.platform === t) && (n === void 0 || e.shell === n));
+			if (!a) throw new o({ app: e });
+			return a;
 		},
-		catch: (n) => n instanceof e ? n : new e({ app: t })
-	}), O = (t, n, r) => _.tryPromise({
+		catch: (t) => t instanceof o ? t : new o({ app: e })
+	}), F = (e, t, n) => E.tryPromise({
 		try: async () => {
-			let i = (await y().query(E(N).where(S("appId", t)).descriptor)).find((e) => e.name === n);
-			if (!i) throw new e({
-				app: r,
-				channel: n
+			let r = (await b().query(k(w).where(O("appId", e)).descriptor)).find((e) => e.name === t);
+			if (!r) throw new o({
+				app: n,
+				channel: t
 			});
-			return i;
+			return r;
 		},
-		catch: (t) => t instanceof e ? t : new e({
-			app: r,
-			channel: n
+		catch: (e) => e instanceof o ? e : new o({
+			app: n,
+			channel: t
 		})
-	}), k = (e) => y().query(E(P).where(S("id", e)).descriptor).then((e) => e[0] ?? null), A = (e) => y().query(E(P).where(S("appId", e)).descriptor), j = (e) => y().query(E(F).where(S("releaseId", e)).descriptor), R = (e) => y().query(E(N).where(S("appId", e)).descriptor), ve = (e) => n.retention?.perChannel?.[e] ?? n.retention?.keep ?? 10, be = async (e, t) => {
-		let n = await R(e), r = ge(await A(e), n, ve);
+	}), I = (e, t = !1) => {
+		let n = k(T).where(O("id", e));
+		return b().query((t ? n.forUpdate() : n).descriptor).then((e) => e[0] ?? null);
+	}, L = (e) => b().query(k(T).where(O("appId", e)).descriptor), Pe = (e) => b().query(k(C).where(O("releaseId", e)).descriptor), Fe = (e) => b().query(k(w).where(O("appId", e)).descriptor), Ie = (e) => u.retention?.perChannel?.[e] ?? u.retention?.keep ?? 10, Le = async (e, t) => {
+		let n = await Fe(e), r = te(await L(e), n, Ie);
 		if (r.length === 0) return [];
-		for (let e of r) await y().deleteMany(l, { where: S("releaseId", e.id) }), await y().delete(f, e.id);
-		return await q({
+		for (let e of r) await b().deleteMany(h, { where: O("releaseId", e.id) }), await b().delete(m, e.id);
+		return await z({
 			appId: e,
 			kind: "prune",
 			actorId: t,
@@ -298,8 +109,8 @@ var ge = (e, t, n) => {
 				channel: n.find((t) => t.id === e.channelId)?.name ?? null
 			})) }
 		}), r;
-	}, Ce = async (e) => {
-		let t = await j(e.id);
+	}, Re = async (e) => {
+		let t = await Pe(e.id);
 		return {
 			id: e.id,
 			version: e.version,
@@ -314,14 +125,14 @@ var ge = (e, t, n) => {
 				target: e.target,
 				url: e.url,
 				sha256: e.sha256,
-				size: e.size,
+				size: n(e.size),
 				signature: e.signature,
 				assetKey: e.assetKey,
 				contentType: e.contentType
 			}))
 		};
-	}, K = async (e, t) => {
-		let n = await _.runPromise(D(e)), r = await _.runPromise(O(n.id, t, e)), i = r.currentReleaseId ? await k(r.currentReleaseId) : null;
+	}, R = async (e, t) => {
+		let n = await E.runPromise(P(e)), r = await E.runPromise(F(n.id, t, e)), i = r.currentReleaseId ? await I(r.currentReleaseId) : null;
 		return {
 			app: e,
 			channel: t,
@@ -332,8 +143,8 @@ var ge = (e, t, n) => {
 			rolloutSalt: i?.rolloutSalt ?? null,
 			cohorts: i?.cohorts ?? null
 		};
-	}, q = (e) => y().insert(g, {
-		id: G("relev"),
+	}, z = (e) => b().insert(_, {
+		id: M("relev"),
 		appId: e.appId,
 		channelId: e.channelId ?? null,
 		releaseId: e.releaseId ?? null,
@@ -341,55 +152,55 @@ var ge = (e, t, n) => {
 		reason: e.reason ?? null,
 		actorId: e.actorId ?? null,
 		detail: e.detail ?? null,
-		at: new Date(a())
-	}), J = (e) => e.request.subject.type === "user" ? e.request.subject.id : null, we = {
-		...se,
+		at: new Date(f())
+	}), B = (e) => e.request.subject.type === "user" ? e.request.subject.id : null, ze = {
+		...ae,
 		description: "The reactive release policy of a channel: latest version, minimum supported version, kill switches, rollout.",
-		execute: (e) => _.tryPromise({
-			try: () => K(e.app, e.channel),
+		execute: (e) => E.tryPromise({
+			try: () => R(e.app, e.channel),
 			catch: (e) => e
 		})
-	}, Te = {
-		...ae,
+	}, Be = {
+		...ie,
 		description: "Every release of an app target, newest first.",
-		execute: (e) => _.gen(function* () {
-			let t = yield* D(e.app), n = yield* _.promise(() => A(t.id)), r = yield* _.promise(() => y().query(E(N).where(S("appId", t.id)).descriptor)), i = /* @__PURE__ */ new Map();
-			for (let e of r) i.has(e.id) || i.set(e.id, e.name);
-			let a = /* @__PURE__ */ new Map(), o = [...new Set(n.map((e) => e.id))];
-			for (let e = 0; e < o.length; e += 500) {
-				let t = yield* _.promise(() => y().query(E(F).where(fe("releaseId", o.slice(e, e + 500))).descriptor));
+		execute: (e) => E.gen(function* () {
+			let t = yield* P(e.app), n = yield* E.promise(() => L(t.id)), i = yield* E.promise(() => b().query(k(w).where(O("appId", t.id)).descriptor)), a = /* @__PURE__ */ new Map();
+			for (let e of i) a.has(e.id) || a.set(e.id, e.name);
+			let o = /* @__PURE__ */ new Map(), s = [...new Set(n.map((e) => e.id))];
+			for (let e = 0; e < s.length; e += 500) {
+				let t = yield* E.promise(() => b().query(k(C).where(De("releaseId", s.slice(e, e + 500))).descriptor));
 				for (let e of t) {
-					let t = a.get(e.releaseId) ?? {
+					let t = o.get(e.releaseId) ?? {
 						count: 0,
 						signed: !0
 					};
-					t.count++, t.signed &&= e.signature !== null, a.set(e.releaseId, t);
+					t.count++, t.signed &&= r(e.signature), o.set(e.releaseId, t);
 				}
 			}
-			let s = [];
+			let l = [];
 			for (let e of [...n].sort((e, t) => t.createdAt.getTime() - e.createdAt.getTime() || c(t.version, e.version))) {
-				let t = a.get(e.id);
-				s.push({
+				let t = o.get(e.id);
+				l.push({
 					id: e.id,
 					version: e.version,
 					buildId: e.buildId,
 					state: e.state,
 					rolloutPercent: e.rolloutPercent,
-					channel: i.get(e.channelId) ?? "?",
+					channel: a.get(e.channelId) ?? "?",
 					createdAt: e.createdAt.toISOString(),
 					artifacts: t?.count ?? 0,
 					signed: t !== void 0 && t.count > 0 && t.signed
 				});
 			}
-			return s;
+			return l;
 		})
-	}, Ee = {
-		...re,
+	}, V = {
+		...ce,
 		description: "Register an app target at runtime, with its channels; idempotent.",
-		execute: (e) => _.tryPromise({
+		execute: (e) => E.tryPromise({
 			try: async () => {
-				await T();
-				let { row: t, created: n } = await C({
+				await N();
+				let { row: t, created: n } = await ge({
 					app: e.app,
 					platform: e.platform,
 					shell: e.shell,
@@ -403,255 +214,297 @@ var ge = (e, t, n) => {
 					created: n
 				};
 			},
-			catch: (n) => new t({ reason: `releases: ${e.app} could not be registered: ${n instanceof Error ? n.message : String(n)}` })
+			catch: (t) => new s({ reason: `releases: ${e.app} could not be registered: ${t instanceof Error ? t.message : String(t)}` })
 		})
-	}, De = {
-		...u,
+	}, H = {
+		...re,
 		description: "Create a draft release of a version on a channel.",
-		execute: (e, n) => _.gen(function* () {
-			let r = yield* D(e.app), i = yield* O(r.id, e.channel, e.app);
-			if ((yield* _.promise(() => A(r.id))).some((t) => t.version === e.version)) return yield* _.fail(new t({ reason: `version ${e.version} already exists for ${e.app}` }));
-			let o = G("rel");
-			return yield* _.promise(() => y().insert(f, {
-				id: o,
-				appId: r.id,
-				channelId: i.id,
+		execute: (e, t) => E.gen(function* () {
+			let n = yield* P(e.app), r = yield* F(n.id, e.channel, e.app);
+			if ((yield* E.promise(() => L(n.id))).some((t) => t.version === e.version)) return yield* E.fail(new s({ reason: `version ${e.version} already exists for ${e.app}` }));
+			let i = M("rel");
+			return yield* E.promise(() => b().insert(m, {
+				id: i,
+				appId: n.id,
+				channelId: r.id,
 				version: e.version,
 				buildId: e.buildId ?? null,
 				notes: e.notes ?? null,
 				state: "draft",
 				rolloutPercent: 0,
-				rolloutSalt: G("salt"),
+				rolloutSalt: M("salt"),
 				cohorts: e.cohorts ?? null,
-				createdBy: J(n),
-				createdAt: new Date(a()),
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => q({
-				appId: r.id,
-				channelId: i.id,
-				releaseId: o,
+				createdBy: B(t),
+				createdAt: new Date(f()),
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => z({
+				appId: n.id,
+				channelId: r.id,
+				releaseId: i,
 				kind: "create",
-				actorId: J(n),
+				actorId: B(t),
 				detail: { version: e.version }
-			})), yield* _.promise(() => be(r.id, J(n))), { id: o };
+			})), yield* E.promise(() => Le(n.id, B(t))), { id: i };
 		})
-	}, Oe = {
-		...ie,
+	}, Ve = async (e, n) => {
+		if (n.operationId !== void 0 && !t(n.operationId)) throw new s({ reason: "Invalid artifact operationId." });
+		let r = (await e.query(k(T).where(O("id", n.releaseId)).descriptor))[0];
+		if (!r) throw new o({
+			app: "?",
+			version: n.releaseId
+		});
+		let i = (await e.query(k(S).where(O("id", r.appId)).forUpdate().descriptor))[0], c = (await e.query(k(T).where(O("id", n.releaseId)).forUpdate().descriptor))[0];
+		if (!i || !c || n.appPrefix !== void 0 && !i.app.startsWith(n.appPrefix)) throw new o({
+			app: "?",
+			version: n.releaseId
+		});
+		if (c.appId !== i.id || n.app !== void 0 && n.app !== i.app || n.version !== void 0 && n.version !== c.version) throw new s({ reason: "Release does not match requested upload destination." });
+		let l = n.operationId === void 0 ? void 0 : (await e.query(k(C).where(O("id", a(n.releaseId, n.operationId))).forUpdate().descriptor))[0];
+		if (l && l.releaseId !== c.id) throw new s({ reason: "Upload operation does not match the current release." });
+		let u = n.expectedTarget;
+		if (u !== void 0 && (u.id !== i.id || !Number.isSafeInteger(u.revision) || u.revision < 0 || u.revision >= 2 ** 53 - 1 || !l && u.revision !== i.revision)) throw new s({ reason: "Release target changed. Refresh and review the action again." });
+		return {
+			release: c,
+			target: i,
+			completed: l
+		};
+	}, U = {
+		...oe,
+		description: "Resolve a release upload destination before transferring bytes; does not reserve publication.",
+		execute: (e, t) => E.tryPromise({
+			try: async () => {
+				await N();
+				let n = async (t) => {
+					let { release: n, target: r } = await Ve(t, e);
+					return {
+						releaseId: n.id,
+						app: r.app,
+						version: n.version
+					};
+				};
+				return t.mutationStore ? n(t.mutationStore) : b().transactional(n);
+			},
+			catch: (e) => e
+		})
+	}, W = {
+		...pe,
 		description: "Attach an artefact (a file the client downloads) to a release.",
-		execute: (n, r) => _.gen(function* () {
-			let i = yield* _.promise(() => k(n.releaseId));
-			if (!i) return yield* _.fail(new e({
+		execute: (t, n) => E.gen(function* () {
+			let r = yield* E.promise(() => I(t.releaseId));
+			if (!r) return yield* E.fail(new o({
 				app: "?",
-				version: n.releaseId
+				version: t.releaseId
 			}));
-			if (!/^[a-f0-9]{64}$/i.test(n.sha256)) return yield* _.fail(new t({ reason: "sha256 must be 64 hex characters" }));
-			let o = G("relart");
-			return yield* _.promise(() => y().insert(l, {
-				id: o,
-				releaseId: i.id,
-				kind: n.kind,
-				target: n.target ?? null,
-				url: n.url,
-				sha256: n.sha256.toLowerCase(),
-				size: n.size,
-				signature: n.signature ?? null,
-				notarized: n.notarized ?? !1,
-				assetKey: n.assetKey ?? null,
-				contentType: n.contentType ?? null,
-				createdAt: new Date(a())
-			})), yield* _.promise(() => q({
-				appId: i.appId,
-				releaseId: i.id,
+			if (t.version !== void 0 && t.version !== r.version) return yield* E.fail(new s({ reason: "Release does not match the requested upload version." }));
+			let i = e(t);
+			if (i !== void 0) return yield* E.fail(new s({ reason: i }));
+			let c = t.operationId === void 0 ? M("relart") : a(t.releaseId, t.operationId);
+			return yield* E.promise(() => b().insert(h, {
+				id: c,
+				releaseId: r.id,
+				kind: t.kind,
+				target: t.target ?? null,
+				url: t.url,
+				sha256: t.sha256.toLowerCase(),
+				size: String(t.size),
+				signature: t.signature ?? null,
+				notarized: t.notarized ?? !1,
+				assetKey: t.assetKey ?? null,
+				contentType: t.contentType ?? null,
+				createdAt: new Date(f())
+			})), yield* E.promise(() => z({
+				appId: r.appId,
+				releaseId: r.id,
 				kind: "upload",
-				actorId: J(r),
+				actorId: B(n),
 				detail: {
-					kind: n.kind,
-					target: n.target ?? null
+					kind: t.kind,
+					target: t.target ?? null
 				}
-			})), { id: o };
+			})), { id: c };
 		})
-	}, ke = {
-		...ee,
+	}, G = {
+		...se,
 		description: "Point a channel at a release (no rebuild) and start its rollout.",
-		execute: (n, r) => _.gen(function* () {
-			let i = yield* D(n.app), o = yield* O(i.id, n.to, n.app), s = yield* _.promise(() => A(i.id)), c = s.find((e) => e.version === n.version);
-			if (!c) return yield* _.fail(new e({
-				app: n.app,
-				version: n.version
+		execute: (e, t) => E.gen(function* () {
+			let n = yield* P(e.app), i = yield* F(n.id, e.to, e.app), a = yield* E.promise(() => L(n.id)), c = a.find((t) => t.version === e.version);
+			if (!c) return yield* E.fail(new o({
+				app: e.app,
+				version: e.version
 			}));
-			let l = yield* _.promise(() => j(c.id));
-			if (!o.allowUnsigned && l.some((e) => e.signature === null)) return yield* _.fail(new t({ reason: `release ${n.version} has unsigned artefacts; channel ${n.to} refuses them` }));
-			let u = Math.max(0, Math.min(100, n.rolloutPercent ?? 100));
-			return yield* _.promise(() => y().update(f, c.id, {
-				channelId: o.id,
+			let l = yield* E.promise(() => Pe(c.id));
+			if (!i.allowUnsigned && l.some((e) => !r(e.signature))) return yield* E.fail(new s({ reason: `release ${e.version} has unsigned artefacts; channel ${e.to} refuses them` }));
+			let u = Math.max(0, Math.min(100, e.rolloutPercent ?? 100));
+			return yield* E.promise(() => b().update(m, c.id, {
+				channelId: i.id,
 				state: u >= 100 ? "complete" : "rolling",
 				rolloutPercent: u,
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => y().update(h, o.id, {
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => b().update(g, i.id, {
 				currentReleaseId: c.id,
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => q({
-				appId: i.id,
-				channelId: o.id,
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => z({
+				appId: n.id,
+				channelId: i.id,
 				releaseId: c.id,
 				kind: "promote",
-				actorId: J(r),
+				actorId: B(t),
 				detail: {
-					from: s.find((e) => e.id === o.currentReleaseId)?.version ?? null,
-					to: n.version,
+					from: a.find((e) => e.id === i.currentReleaseId)?.version ?? null,
+					to: e.version,
 					rolloutPercent: u
 				}
 			})), {
-				channel: n.to,
-				version: n.version,
+				channel: e.to,
+				version: e.version,
 				rolloutPercent: u
 			};
 		})
-	}, Ae = {
-		...ne,
+	}, K = {
+		...de,
 		description: "Change the rollout percentage of the channel's current release.",
-		execute: (n, r) => _.gen(function* () {
-			let i = yield* D(n.app), o = yield* O(i.id, n.channel, n.app);
-			if (!o.currentReleaseId) return yield* _.fail(new t({ reason: `channel ${n.channel} has no current release` }));
-			let s = yield* _.promise(() => k(o.currentReleaseId));
-			if (!s) return yield* _.fail(new e({
-				app: n.app,
-				channel: n.channel
+		execute: (e, t) => E.gen(function* () {
+			let n = yield* P(e.app), r = yield* F(n.id, e.channel, e.app);
+			if (!r.currentReleaseId) return yield* E.fail(new s({ reason: `channel ${e.channel} has no current release` }));
+			let i = yield* E.promise(() => I(r.currentReleaseId));
+			if (!i) return yield* E.fail(new o({
+				app: e.app,
+				channel: e.channel
 			}));
-			let c = Math.max(0, Math.min(100, n.percent));
-			return yield* _.promise(() => y().update(f, s.id, {
-				rolloutPercent: c,
-				state: c >= 100 ? "complete" : "rolling",
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => q({
-				appId: i.id,
-				channelId: o.id,
-				releaseId: s.id,
+			let a = Math.max(0, Math.min(100, e.percent));
+			return yield* E.promise(() => b().update(m, i.id, {
+				rolloutPercent: a,
+				state: a >= 100 ? "complete" : "rolling",
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => z({
+				appId: n.id,
+				channelId: r.id,
+				releaseId: i.id,
 				kind: "rollout",
-				actorId: J(r),
-				detail: { percent: c }
+				actorId: B(t),
+				detail: { percent: a }
 			})), {
-				version: s.version,
-				rolloutPercent: c
+				version: i.version,
+				rolloutPercent: a
 			};
 		})
-	}, je = {
-		...te,
+	}, q = {
+		...ue,
 		description: "Point the channel back at the previous release; the current one is marked rolled back.",
-		execute: (e, n) => _.gen(function* () {
-			let r = yield* D(e.app), i = yield* O(r.id, e.channel, e.app);
-			if (!i.currentReleaseId) return yield* _.fail(new t({ reason: `channel ${e.channel} has no current release` }));
-			let o = yield* _.promise(() => A(r.id)), s = o.find((e) => e.id === i.currentReleaseId), l = o.filter((e) => e.channelId === i.id && e.id !== i.currentReleaseId && e.state !== "rolledBack").sort((e, t) => c(t.version, e.version))[0];
-			return s && (yield* _.promise(() => y().update(f, s.id, {
+		execute: (e, t) => E.gen(function* () {
+			let n = yield* P(e.app), r = yield* F(n.id, e.channel, e.app);
+			if (!r.currentReleaseId) return yield* E.fail(new s({ reason: `channel ${e.channel} has no current release` }));
+			let i = yield* E.promise(() => L(n.id)), a = i.find((e) => e.id === r.currentReleaseId), o = i.filter((e) => e.channelId === r.id && e.id !== r.currentReleaseId && e.state !== "rolledBack").sort((e, t) => c(t.version, e.version))[0];
+			return a && (yield* E.promise(() => b().update(m, a.id, {
 				state: "rolledBack",
-				updatedAt: new Date(a())
-			}))), yield* _.promise(() => y().update(h, i.id, {
-				currentReleaseId: l?.id ?? null,
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => q({
-				appId: r.id,
-				channelId: i.id,
-				releaseId: s?.id ?? null,
+				updatedAt: new Date(f())
+			}))), yield* E.promise(() => b().update(g, r.id, {
+				currentReleaseId: o?.id ?? null,
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => z({
+				appId: n.id,
+				channelId: r.id,
+				releaseId: a?.id ?? null,
 				kind: "rollback",
 				reason: e.reason,
-				actorId: J(n),
+				actorId: B(t),
 				detail: {
-					from: s?.version ?? null,
-					to: l?.version ?? null
+					from: a?.version ?? null,
+					to: o?.version ?? null
 				}
-			})), { version: l?.version ?? null };
+			})), { version: o?.version ?? null };
 		})
-	}, Me = {
-		...oe,
+	}, J = {
+		...fe,
 		description: "Set the minimum supported version and kill switches of a channel.",
-		execute: (e, t) => _.gen(function* () {
-			let n = yield* D(e.app), r = yield* O(n.id, e.channel, e.app);
-			return yield* _.promise(() => y().update(h, r.id, {
+		execute: (e, t) => E.gen(function* () {
+			let n = yield* P(e.app), r = yield* F(n.id, e.channel, e.app);
+			return yield* E.promise(() => b().update(g, r.id, {
 				...e.minSupportedVersion === void 0 ? {} : { minSupportedVersion: e.minSupportedVersion },
 				...e.killSwitches === void 0 ? {} : { killSwitches: e.killSwitches },
-				updatedAt: new Date(a())
-			})), yield* _.promise(() => q({
+				updatedAt: new Date(f())
+			})), yield* E.promise(() => z({
 				appId: n.id,
 				channelId: r.id,
 				kind: "policy",
 				reason: e.reason,
-				actorId: J(t),
+				actorId: B(t),
 				detail: {
 					minSupportedVersion: e.minSupportedVersion ?? null,
 					killSwitches: e.killSwitches ?? null
 				}
-			})), yield* _.promise(() => K(e.app, e.channel));
+			})), yield* E.promise(() => R(e.app, e.channel));
 		})
 	}, Y = async (e, t) => {
-		let n = await _.runPromise(D(e)), r = await _.runPromise(O(n.id, t, e)), i = r.currentReleaseId ? await k(r.currentReleaseId) : null;
+		let n = await E.runPromise(P(e)), r = await E.runPromise(F(n.id, t, e)), i = r.currentReleaseId ? await I(r.currentReleaseId) : null;
 		return {
 			app: n,
 			channel: r,
-			release: i ? await Ce(i) : null
+			release: i ? await Re(i) : null
 		};
-	}, X = (e, t) => t.get("install") ?? e.headers["x-voltro-install-id"] ?? e.headers["expo-embedded-update-id"] ?? "anonymous", Ne = {
+	}, X = (e, t) => t.get("install") ?? e.headers["x-voltro-install-id"] ?? e.headers["expo-embedded-update-id"] ?? "anonymous", He = {
 		method: "GET",
-		path: r,
-		handle: async (t) => {
-			if (t.method !== "GET" && t.method !== "HEAD") return U(405, { error: "method_not_allowed" });
-			let n = t.path.slice(r.length).split("/").filter((e) => e.length > 0).map(decodeURIComponent), a = new URLSearchParams(t.query), [o, s] = n;
-			if (!o || !s) return U(404, { error: "not_found" });
+		path: d,
+		handle: async (e) => {
+			if (e.method !== "GET" && e.method !== "HEAD") return A(405, { error: "method_not_allowed" });
+			let t = e.path.slice(d.length).split("/").filter((e) => e.length > 0).map(decodeURIComponent), n = new URLSearchParams(e.query), [r, i] = t;
+			if (!r || !i) return A(404, { error: "not_found" });
 			try {
-				if (s === "tauri") {
-					let [, , e, r, i] = n;
-					if (!e || !r || !i) return U(400, { error: "expected /tauri/:channel/:target/:currentVersion" });
-					let { release: s } = await Y(o, e), c = s ? z(s, {
-						installId: X(t, a),
-						currentVersion: i,
-						target: r
+				if (i === "tauri") {
+					let [, , i, a, o] = t;
+					if (!i || !a || !o) return A(400, { error: "expected /tauri/:channel/:target/:currentVersion" });
+					let { release: s } = await Y(r, i), c = s ? xe(s, {
+						installId: X(e, n),
+						currentVersion: o,
+						target: a
 					}) : null;
-					return c ? U(200, c) : W(204);
+					return c ? A(200, c) : j(204);
 				}
-				if (s === "expo" && n[2] === "manifest") {
-					let e = t.headers["expo-channel-name"] ?? a.get("channel") ?? "stable", n = t.headers["expo-platform"] ?? a.get("platform"), r = t.headers["expo-runtime-version"] ?? a.get("runtimeVersion") ?? "";
-					if (n !== "ios" && n !== "android") return U(400, { error: "expo-platform must be ios or android" });
-					let { app: i, release: s } = await Y(o, e), c = _e(s, {
-						installId: X(t, a),
+				if (i === "expo" && t[2] === "manifest") {
+					let t = e.headers["expo-channel-name"] ?? n.get("channel") ?? "stable", i = e.headers["expo-platform"] ?? n.get("platform"), a = e.headers["expo-runtime-version"] ?? n.get("runtimeVersion") ?? "";
+					if (i !== "ios" && i !== "android") return A(400, { error: "expo-platform must be ios or android" });
+					let { app: o, release: s } = await Y(r, t), c = be(s, {
+						installId: X(e, n),
 						currentVersion: null,
-						platform: n,
-						runtimeVersion: r,
-						currentUpdateId: t.headers["expo-current-update-id"] ?? null
+						platform: i,
+						runtimeVersion: a,
+						currentUpdateId: e.headers["expo-current-update-id"] ?? null
 					}, {
-						runtimeVersion: i.runtimeVersion,
+						runtimeVersion: o.runtimeVersion,
 						rolledBackTo: null
 					});
-					return c.kind === "no-update" ? U(200, { type: "noUpdateAvailable" }, {
+					return c.kind === "no-update" ? A(200, { type: "noUpdateAvailable" }, {
 						"expo-protocol-version": "1",
 						"expo-sfv-version": "0"
-					}) : c.kind === "rollback" ? U(200, {
+					}) : c.kind === "rollback" ? A(200, {
 						type: "rollBackToEmbedded",
 						parameters: { commitTime: c.commitTime }
 					}, {
 						"expo-protocol-version": "1",
 						"expo-sfv-version": "0"
-					}) : U(200, c.manifest, {
+					}) : A(200, c.manifest, {
 						"expo-protocol-version": "1",
 						"expo-sfv-version": "0",
 						"expo-manifest-filters": ""
 					});
 				}
-				if (s === "electron") {
-					let [, , e, t] = n;
-					if (!e || !t) return U(400, { error: "expected /electron/:channel/latest.yml" });
-					let r = t === "latest-mac.yml" ? "mac" : t === "latest-linux.yml" ? "linux" : t === "latest.yml" ? "win" : null;
-					if (r === null) return U(404, { error: "not_found" });
-					let { release: i } = await Y(o, e), a = i ? B(i, r) : null;
-					return a ? ye(200, a, "text/yaml; charset=utf-8") : W(204);
+				if (i === "electron") {
+					let [, , e, n] = t;
+					if (!e || !n) return A(400, { error: "expected /electron/:channel/latest.yml" });
+					let i = n === "latest-mac.yml" ? "mac" : n === "latest-linux.yml" ? "linux" : n === "latest.yml" ? "win" : null;
+					if (i === null) return A(404, { error: "not_found" });
+					let { release: a } = await Y(r, e), o = a ? ye(a, i) : null;
+					return o ? je(200, o, "text/yaml; charset=utf-8") : j(204);
 				}
-				if (s === "download") {
-					let [, , e] = n;
-					if (!e) return U(400, { error: "expected /download/:channel" });
-					let { channel: r, release: i } = await Y(o, e);
-					if (!r.public) return U(403, { error: "channel_not_public" });
-					if (!i) return W(204);
-					let s = a.get("os") ?? H(t.headers["user-agent"] ?? "")?.os, c = a.get("arch") ?? H(t.headers["user-agent"] ?? "")?.arch;
-					if (!s) return U(400, { error: "os is required (?os=macos|windows|linux|ios|android)" });
-					let l = V(i, s, c);
+				if (i === "download") {
+					let [, , i] = t;
+					if (!i) return A(400, { error: "expected /download/:channel" });
+					let { channel: a, release: o } = await Y(r, i);
+					if (!a.public) return A(403, { error: "channel_not_public" });
+					if (!o) return j(204);
+					let s = n.get("os") ?? _e(e.headers["user-agent"] ?? "")?.os, c = n.get("arch") ?? _e(e.headers["user-agent"] ?? "")?.arch;
+					if (!s) return A(400, { error: "os is required (?os=macos|windows|linux|ios|android)" });
+					let l = ve(o, s, c);
 					return l ? {
 						status: 302,
 						body: "",
@@ -659,39 +512,39 @@ var ge = (e, t, n) => {
 							location: l.url,
 							"cache-control": "no-store"
 						}
-					} : U(404, { error: "no_artifact_for_os" });
+					} : A(404, { error: "no_artifact_for_os" });
 				}
-				if (s === "policy") {
-					let [, , e] = n;
-					if (!e) return U(400, { error: "expected /policy/:channel" });
-					let r = await K(o, e), s = a.get("version"), c = s ? i(r, {
-						version: s,
-						installId: X(t, a)
+				if (i === "policy") {
+					let [, , i] = t;
+					if (!i) return A(400, { error: "expected /policy/:channel" });
+					let a = await R(r, i), o = n.get("version"), s = o ? l(a, {
+						version: o,
+						installId: X(e, n)
 					}) : null;
-					return U(200, {
-						policy: r,
-						...c ? { verdict: c } : {}
+					return A(200, {
+						policy: a,
+						...s ? { verdict: s } : {}
 					});
 				}
-				return U(404, { error: "not_found" });
-			} catch (t) {
-				if (t instanceof e) return U(404, {
+				return A(404, { error: "not_found" });
+			} catch (e) {
+				if (e instanceof o) return A(404, {
 					error: "not_found",
-					app: t.app
+					app: e.app
 				});
-				throw t;
+				throw e;
 			}
 		}
 	}, Z = (e) => ({
 		kind: "json",
 		data: e
-	}), Pe = [{
+	}), Ue = [{
 		method: "GET",
 		path: "/overview",
 		scope: "shared-store",
 		description: "Every app target with its channels, current versions and rollout state.",
-		handler: () => _.promise(async () => {
-			let e = await y().query(E(M).descriptor), t = await y().query(E(N).descriptor), n = await y().query(E(P).descriptor), r = /* @__PURE__ */ new Map();
+		handler: () => E.promise(async () => {
+			let e = await b().query(k(S).descriptor), t = await b().query(k(w).descriptor), n = await b().query(k(T).descriptor), r = /* @__PURE__ */ new Map();
 			for (let e of t) {
 				let t = r.get(e.appId);
 				t === void 0 ? r.set(e.appId, [e]) : t.push(e);
@@ -723,90 +576,122 @@ var ge = (e, t, n) => {
 		path: "/events",
 		scope: "shared-store",
 		description: "The last 100 release events (promote, rollback, rollout, policy).",
-		handler: () => _.promise(async () => {
-			let e = await y().query(E(I).descriptor), t = await y().query(E(N).descriptor), n = new Map(t.map((e) => [e.id, e.name]));
+		handler: () => E.promise(async () => {
+			let e = await b().query(k(me).descriptor), t = await b().query(k(w).descriptor), n = new Map(t.map((e) => [e.id, e.name]));
 			return Z({ events: [...e].sort((e, t) => t.at.getTime() - e.at.getTime()).slice(0, 100).map((e) => ({
 				...e,
 				channelName: e.channelId === null ? null : n.get(e.channelId) ?? null,
 				at: e.at.toISOString()
 			})) });
 		})
-	}], Fe = async (n, r) => {
-		let i = n.releaseId === void 0 ? null : await k(n.releaseId);
-		if (n.releaseId !== void 0 && !i) throw new e({ app: n.releaseId });
-		let a = (await y().query(E(M).descriptor)).filter((e) => (n.app === void 0 || e.app === n.app) && (n.platform === void 0 || e.platform === n.platform) && (n.shell === void 0 || e.shell === n.shell) && (i === null || e.id === i.appId) && (n.expectedTarget === void 0 || e.id === n.expectedTarget.id));
-		if (a.length === 0 && r) return;
-		if (a.length === 0) throw new e({ app: n.app ?? n.releaseId ?? "" });
-		if (a.length !== 1) throw new t({ reason: "Multiple release targets match this app. Select an exact target." });
-		let o = a[0], s = n.expectedTarget?.revision ?? o.revision;
-		if (!Number.isSafeInteger(s) || s < 0 || s >= 2 ** 53 - 1 || o.revision !== s || await y().updateMany("_voltro_release_apps", { revision: s + 1 }, { where: de(S("id", o.id), S("revision", s)) }) !== 1) throw new t({ reason: "Release target changed. Refresh and review the action again." });
-		return o.id;
-	}, Ie = (e) => e.kind === "mutation" ? {
-		...e,
-		execute: (t, n) => _.gen(function* () {
-			let r = yield* _.context();
-			return yield* _.tryPromise({
-				try: async (i) => {
-					await T();
-					let a = (a) => s.run(a, async () => {
-						let a = await Fe(t, e.name === "releases.registerApp"), o = () => _.runPromiseWith(r)(e.execute(t, n).pipe(_.result), { signal: i }), s = a === void 0 ? await o() : await p.run(a, o);
-						if (v.isFailure(s)) throw s.failure;
-						return s.success;
+	}], We = async (e, t) => {
+		let n = e.releaseId === void 0 ? null : await I(e.releaseId);
+		if (e.releaseId !== void 0 && !n) throw new o({ app: e.releaseId });
+		let r = (await b().query(k(S).descriptor)).filter((t) => (e.appPrefix === void 0 || t.app.startsWith(e.appPrefix)) && (e.app === void 0 || t.app === e.app) && (e.platform === void 0 || t.platform === e.platform) && (e.shell === void 0 || t.shell === e.shell) && (n === null || t.id === n.appId) && (e.expectedTarget === void 0 || t.id === e.expectedTarget.id));
+		if (r.length === 0 && t) return;
+		if (r.length === 0) throw new o({ app: e.app ?? e.releaseId ?? "" });
+		if (r.length !== 1) throw new s({ reason: "Multiple release targets match this app. Select an exact target." });
+		let i = r[0], a = e.expectedTarget?.revision ?? i.revision;
+		if (!Number.isSafeInteger(a) || a < 0 || a >= 2 ** 53 - 1 || i.revision !== a || await b().updateMany("_voltro_release_apps", { revision: a + 1 }, { where: Ee(O("id", i.id), O("revision", a), O("app", i.app), O("platform", i.platform), O("shell", i.shell)) }) !== 1) throw new s({ reason: "Release target changed. Refresh and review the action again." });
+		let c = (await b().query(k(S).where(O("id", i.id)).forUpdate().descriptor))[0];
+		if (c === void 0 || c.app !== i.app || c.platform !== i.platform || c.shell !== i.shell || c.revision !== a + 1 || e.appPrefix !== void 0 && !c.app.startsWith(e.appPrefix)) throw new s({ reason: "Release target changed. Refresh and review the action again." });
+		if (e.releaseId !== void 0) {
+			let t = await I(e.releaseId, !0);
+			if (t === null || t.appId !== i.id) throw new s({ reason: "Release target changed. Refresh and review the action again." });
+		}
+		return i.id;
+	}, Ge = (t) => t.kind === "mutation" ? {
+		...t,
+		execute: (n, r) => E.gen(function* () {
+			let a = yield* E.context();
+			return yield* E.tryPromise({
+				try: async (o) => {
+					await N();
+					let c = (c) => ee.run(c, async () => {
+						if (t.name === "releases.upload") {
+							let t = n;
+							if (t.operationId !== void 0) {
+								let n = e(t);
+								if (n !== void 0) throw new s({ reason: n });
+								let { completed: r } = await Ve(c, t);
+								if (r) {
+									if (!i(r, t)) throw new s({ reason: "Upload operationId was already used for different artifact metadata." });
+									return { id: r.id };
+								}
+							}
+						}
+						let l = await We(n, t.name === "releases.registerApp"), u = () => E.runPromiseWith(a)(t.execute(n, r).pipe(E.result), { signal: o }), d = l === void 0 ? await u() : await y.run(l, u);
+						if (D.isFailure(d)) throw d.failure;
+						return d.success;
 					});
-					return n.mutationStore ? a(n.mutationStore) : y().transactional(a);
+					return r.mutationStore ? c(r.mutationStore) : b().transactional(c);
 				},
 				catch: (e) => e
 			});
 		})
-	} : e, Le = () => ({ request: {
+	} : t, Ke = {
+		apps: V,
+		create: H,
+		"prepare-upload": U,
+		upload: W,
+		promote: G,
+		rollout: K,
+		rollback: q,
+		policy: J
+	}, qe = (e, t, n) => {
+		if (!Object.hasOwn(Ke, e)) return E.fail(new s({ reason: "Unknown release management action." }));
+		let r = Ke[e];
+		return Se.decodeUnknownEffect(r.input)(t).pipe(E.flatMap((e) => Ge(r).execute(e, n)));
+	}, Je = () => ({ request: {
 		subject: {
 			type: "anonymous",
 			id: null,
 			tenantId: null
 		},
-		traceId: he()
+		traceId: Ae()
 	} }), Q = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), $ = (n, r, i) => ({
+	}), $ = (e, t, n) => ({
 		method: "POST",
-		path: n,
-		description: i,
-		handler: (n) => _.gen(function* () {
-			let i;
+		path: e,
+		description: n,
+		handler: (e) => E.gen(function* () {
+			let n;
 			try {
-				i = JSON.parse(n.body || "{}");
+				n = JSON.parse(e.body || "{}");
 			} catch {
 				return Q(400, "invalid JSON body");
 			}
-			if (typeof i != "object" || !i || Array.isArray(i)) return Q(400, "expected a JSON object body");
-			let a = yield* le.decodeUnknownEffect(r.input)(i).pipe(_.result);
-			if (v.isFailure(a)) return Q(400, "invalid action input");
-			let o = yield* Ie(r).execute(a.success, Le()).pipe(_.result);
-			if (v.isFailure(o)) {
-				let n = o.failure;
-				return n instanceof e ? Q(404, `not found: ${n.app}${n.version ? ` ${n.version}` : ""}${n.channel ? ` (${n.channel})` : ""}`) : n instanceof t ? Q(409, n.reason) : Q(500, "release action failed");
+			if (typeof n != "object" || !n || Array.isArray(n)) return Q(400, "expected a JSON object body");
+			let r = yield* Se.decodeUnknownEffect(t.input)(n).pipe(E.result);
+			if (D.isFailure(r)) return Q(400, "invalid action input");
+			let i = yield* Ge(t).execute(r.success, Je()).pipe(E.result);
+			if (D.isFailure(i)) {
+				let e = i.failure;
+				return e instanceof o ? Q(404, `not found: ${e.app}${e.version ? ` ${e.version}` : ""}${e.channel ? ` (${e.channel})` : ""}`) : e instanceof s ? Q(409, e.reason) : Q(500, "release action failed");
 			}
-			return Z({ result: o.success });
+			return Z({ result: i.success });
 		})
-	}), Re = [
-		$("/apps", Ee, "Register an app target at runtime: { app, platform, shell, channels? }."),
-		$("/create", De, "Create a draft release: { app, channel, version, buildId?, notes? }."),
-		$("/upload", Oe, "Attach an artefact: { releaseId, kind, target?, url, sha256, size, signature? }."),
-		$("/promote", ke, "Promote a version onto a channel: { app, version, to, rolloutPercent? }."),
-		$("/rollout", Ae, "Set the rollout percentage: { app, channel, percent }."),
-		$("/rollback", je, "Roll a channel back: { app, channel, reason }."),
-		$("/policy", Me, "Set the policy: { app, channel, minSupportedVersion?, killSwitches?, reason }.")
+	}), Ye = [
+		$("/apps", V, "Register an app target at runtime: { app, platform, shell, channels? }."),
+		$("/create", H, "Create a draft release: { app, channel, version, buildId?, notes? }."),
+		$("/prepare-upload", U, "Resolve current release/app/version before file transfer; no metadata writes."),
+		$("/upload", W, "Attach an artefact: { releaseId, kind, target?, url, sha256, size, signature? }."),
+		$("/promote", G, "Promote a version onto a channel: { app, version, to, rolloutPercent? }."),
+		$("/rollout", K, "Set the rollout percentage: { app, channel, percent }."),
+		$("/rollback", q, "Roll a channel back: { app, channel, reason }."),
+		$("/policy", J, "Set the policy: { app, channel, minSupportedVersion?, killSwitches?, reason }.")
 	];
-	return pe({
+	return Oe({
 		source: "plugin",
-		table: g,
+		table: _,
 		timeColumn: "at",
-		ttlMs: me(process.env.VOLTRO_RELEASE_EVENTS_TTL_HOURS, 8760),
+		ttlMs: ke(process.env.VOLTRO_RELEASE_EVENTS_TTL_HOURS, 8760),
 		envVar: "VOLTRO_RELEASE_EVENTS_TTL_HOURS"
-	}), ue({
-		name: n.name ? `${m}#${n.name}` : m,
+	}), Object.assign(Te({
+		name: u.name ? `${v}#${u.name}` : v,
 		description: "Release channels, artefacts and rollouts — the self-hosted update server behind Tauri, Expo OTA, electron-updater and PWA feeds, with a reactive release policy.",
 		permissions: [
 			"inspect:read",
@@ -814,40 +699,41 @@ var ge = (e, t, n) => {
 			"store:write"
 		],
 		routes: [
-			we,
-			Te,
-			Ee,
-			De,
-			Oe,
-			ke,
-			Ae,
-			je,
-			Me
-		].map(Ie),
-		rpcClientDescriptors: ce,
-		httpRoutes: [Ne],
-		inspectEndpoints: [...Pe, ...Re],
-		extendSchema: { tables: [...L] },
-		declaredEnv: Se,
-		privacy: xe,
+			ze,
+			Be,
+			V,
+			H,
+			U,
+			W,
+			G,
+			K,
+			q,
+			J
+		].map(Ge),
+		rpcClientDescriptors: le,
+		httpRoutes: [He],
+		inspectEndpoints: [...Ue, ...Ye],
+		extendSchema: { tables: [...he] },
+		declaredEnv: Ne,
+		privacy: Me,
 		bindDataStore: (e) => {
-			o = e, x = w(), x.catch(() => {});
+			p = e, x = Ce(), x.catch(() => {});
 		},
-		onActivate: () => _.tryPromise({
+		onActivate: () => E.tryPromise({
 			catch: (e) => /* @__PURE__ */ Error(`@voltro/plugin-releases could not seed its targets and channels: ${e instanceof Error ? e.message : String(e)}`),
-			try: () => T()
+			try: () => N()
 		})
-	});
-}, xe = { collects: [{
+	}), { manage: qe });
+}, Me = { collects: [{
 	category: "device-id",
 	linked: !1,
 	tracking: !1,
 	purposes: ["app-functionality"]
-}] }, Se = [{
+}] }, Ne = [{
 	name: "VOLTRO_RELEASE_EVENTS_TTL_HOURS",
 	required: !1,
 	secret: !1,
 	description: "Hours a release event (create, upload, promote, rollout, rollback, policy, prune) is kept before the retention sweep removes it. Default 8760 (one year)."
 }];
 //#endregion
-export { m as BASE_NAME, p as RELEASES_MANAGE_SCOPE, f as RELEASES_TABLE, d as RELEASE_APPS_TABLE, l as RELEASE_ARTIFACTS_TABLE, h as RELEASE_CHANNELS_TABLE, g as RELEASE_EVENTS_TABLE, A as RELEASE_PLATFORMS, j as RELEASE_SHELLS, e as ReleaseNotFound, t as ReleaseRefused, c as compareVersions, i as evaluatePolicy, o as inRollout, r as isNewerVersion, R as offeredTo, H as osFromUserAgent, n as parseVersion, V as pickDownload, M as releaseAppsTable, F as releaseArtifactsTable, N as releaseChannelsTable, I as releaseEventsTable, L as releaseTables, be as releasesPlugin, P as releasesTable, B as renderElectronLatestYml, _e as renderExpoFeed, z as renderTauriFeed, a as rolloutBucket, s as sortVersionsDesc };
+export { v as BASE_NAME, y as RELEASES_MANAGE_SCOPE, m as RELEASES_TABLE, ne as RELEASE_APPS_TABLE, h as RELEASE_ARTIFACTS_TABLE, g as RELEASE_CHANNELS_TABLE, _ as RELEASE_EVENTS_TABLE, b as RELEASE_PLATFORMS, x as RELEASE_SHELLS, o as ReleaseNotFound, s as ReleaseRefused, c as compareVersions, l as evaluatePolicy, u as inRollout, d as isNewerVersion, ge as offeredTo, _e as osFromUserAgent, f as parseVersion, ve as pickDownload, S as releaseAppsTable, C as releaseArtifactsTable, w as releaseChannelsTable, me as releaseEventsTable, he as releaseTables, N as releasesPlugin, T as releasesTable, ye as renderElectronLatestYml, be as renderExpoFeed, xe as renderTauriFeed, p as rolloutBucket, ee as sortVersionsDesc };