@hot-updater/aws 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/index.d.mts

@@ -1,17 +1,33 @@
 import { DynamoDBClientConfig } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
-import { StoragePlugin, StoragePluginWith } from "@hot-updater/plugin-core";
-import "@hot-updater/plugin-core/internal";
+import { DatabaseJsonObject, EngineDatabase, Platform, PluginTables, StorageAdapter, StorageAdapterWith } from "@hot-updater/plugin-core";
 import { S3ClientConfig } from "@aws-sdk/client-s3";
 //#region src/dynamoDB.d.ts
-declare const DYNAMODB_UPDATE_INDEX_NAME = "hot-updater-update-index";
 interface DynamoDBConfig extends DynamoDBClientConfig {
   readonly apiBasePath?: string;
   readonly cloudfrontDistributionId?: string;
   readonly shouldWaitForInvalidation?: boolean;
   readonly tableName: string;
+  /**
+   * DynamoDB bills each item a write touches, so Insights' aggregates are
+   * batched: through log rows a compaction merges (the default), or
+   * `{ mode: "memory" }` on a long-lived server. `false` commits them with
+   * each event.
+   */
+  readonly aggregateBatching?: EngineDatabase["aggregateBatching"] | false;
 }
-declare const dynamoDB: (config: DynamoDBConfig) => import("@hot-updater/plugin-core").DatabasePlugin;
+/**
+ * Creates the table when it is missing and writes the schema settings of
+ * core and `plugins`, the plugins the server runs, which the database checks
+ * before its first read. `hot-updater init` runs it in AWS with the managed
+ * server's plugins.
+ */
+declare const migrateDynamoDB: (config: DynamoDBConfig, plugins?: readonly PluginTables[]) => Promise<void>;
+/**
+ * Hot Updater's database on one DynamoDB table, through the storage engine.
+ * With a distribution, it gives core the CloudFront invalidation core runs
+ * after a write that changes what the update-check routes answer.
+ */
+declare const dynamoDB: (config: DynamoDBConfig) => EngineDatabase;
 //#endregion
 //#region src/cloudFrontDownloadUrl.d.ts
 interface CloudFrontPrivateKeyFromGetter {
@@ -41,15 +57,723 @@ interface S3StorageConfig extends S3ClientConfig {
   /** Base path where bundles will be stored in the bucket. */
   basePath?: string;
   downloadUrlSigningKey?: string;
-  getDownloadUrl?: StoragePlugin["getDownloadUrl"];
+  getDownloadUrl?: StorageAdapter["getDownloadUrl"];
 }
 type S3StorageConfigWithDownloadUrl = S3StorageConfig & ({
   downloadUrlSigningKey: string;
 } | {
-  getDownloadUrl: NonNullable<StoragePlugin["getDownloadUrl"]>;
+  getDownloadUrl: NonNullable<StorageAdapter["getDownloadUrl"]>;
 });
 type S3StorageOperations = "put" | "get" | "exists" | "delete" | "listObjects" | "deleteObjects";
-declare function s3Storage(config: S3StorageConfigWithDownloadUrl): StoragePluginWith<S3StorageOperations | "getDownloadUrl">;
-declare function s3Storage(config: S3StorageConfig): StoragePluginWith<S3StorageOperations>;
+declare function s3Storage(config: S3StorageConfigWithDownloadUrl): StorageAdapterWith<S3StorageOperations | "getDownloadUrl">;
+declare function s3Storage(config: S3StorageConfig): StorageAdapterWith<S3StorageOperations>;
 //#endregion
-export { CloudFrontDownloadUrlOptions, DYNAMODB_UPDATE_INDEX_NAME, type DynamoDBConfig, S3StorageConfig, S3StorageConfigWithDownloadUrl, cloudFrontDownloadUrl, dynamoDB, s3Storage };
+//#region ../insights/dist/server/eventRow.d.mts
+//#region src/server/eventRow.d.ts
+/** Where an update failed, and what failed; open sets, `unknown` for any other value. */
+type BundleEventFailureStage = "check" | "download" | "install" | "unknown";
+type BundleEventFailureReason = "network" | "http" | "invalid_response" | "hash_mismatch" | "signature" | "patch" | "extract" | "storage" | "unknown";
+/** An `UPDATE_FAILED` report's failure, as stored. */
+type BundleEventFailure = DatabaseJsonObject & {
+  readonly stage: BundleEventFailureStage;
+  readonly reason: BundleEventFailureReason;
+  /** What the client was fetching or writing. */
+  readonly resource?: "catalog" | "artifact" | "manifest" | "file" | "patch" | "archive" | "unknown";
+  readonly http_status?: number;
+  /** How the connection failed, when it did. */
+  readonly transport?: "timeout" | "dns" | "tls" | "connection" | "offline" | "cancelled" | "unknown";
+  /** The storage origin's error code, such as `ExpiredToken`. */
+  readonly origin_code?: string;
+  /** Android's `ApplicationExitInfo` reason for the process before this one. */
+  readonly previous_process_exit?: string;
+};
+/** Ancillary report data; queryable identity and lifecycle fields stay on the row. */
+type DatabaseBundleEventMetadata = DatabaseJsonObject & {
+  readonly cohort: string;
+  readonly update_strategy: "fingerprint" | "appVersion" | null;
+  readonly fingerprint_hash: string | null;
+  readonly sdk_version: string | null;
+  /** `UPDATE_FAILED`: what failed. */
+  readonly failure?: BundleEventFailure;
+  /** `UPDATE_DOWNLOADED`: how the bundle arrived. */
+  readonly delivery?: "patch" | "manifest" | "archive" | "unknown";
+  /** `UPDATE_DOWNLOADED`: a patch failed and the full files came instead. */
+  readonly patch_fallback?: boolean;
+  /** `RECOVERED`: Android's `ApplicationExitInfo` reason for the crashed process. */
+  readonly previous_process_exit?: string;
+};
+type BundleEventRowBase = {
+  readonly id: string;
+  readonly install_id: string;
+  readonly user_id: string | null;
+  readonly from_release_id: string | null;
+  readonly to_release_id: string | null;
+  readonly to_bundle_id: string;
+  readonly platform: Platform;
+  readonly app_version: string;
+  readonly channel: string;
+  readonly metadata: DatabaseBundleEventMetadata;
+  readonly received_at_ms: number;
+};
+type BundleEventRow = BundleEventRowBase & ({
+  readonly type: "UPDATE_DOWNLOADED";
+  readonly from_bundle_id: string;
+} | {
+  readonly type: "UPDATE_APPLIED" | "RECOVERED";
+  readonly from_bundle_id: string;
+} |
+/** An update that failed: `from` is the running bundle, `to` the target (for a check, the running bundle). */
+{
+  readonly type: "UPDATE_FAILED";
+  readonly from_bundle_id: string;
+} | {
+  readonly type: "UNCHANGED";
+  readonly from_bundle_id: null;
+});
+//#endregion
+//#region ../insights/dist/server/modelTypes.d.mts
+//#region src/server/modelTypes.d.ts
+interface InsightsEventCursor {
+  readonly receivedAtMs: number;
+  readonly id: string;
+}
+interface InsightsScope {
+  readonly platform: "ios" | "android";
+  readonly channel: string;
+}
+/**
+ * Raw event predicates; recovery is attributed to the source bundle. An
+ * UNCHANGED report is kept as no event, so no filter names it.
+ */
+type InsightsBundleEventFilter = InsightsScope & ({
+  readonly type: "RECOVERED";
+  readonly fromBundleId: string;
+} | {
+  readonly type: "UPDATE_DOWNLOADED" | "UPDATE_APPLIED" | "UPDATE_FAILED";
+  readonly toBundleId: string;
+});
+type InsightsEventFilter = {
+  readonly kind: "all";
+} | {
+  readonly kind: "installationMovement";
+  readonly installId: string;
+} | ({
+  readonly kind: "bundle";
+} & InsightsBundleEventFilter);
+interface InsightsListEventsInput {
+  readonly filter: InsightsEventFilter;
+  readonly sinceMs?: number;
+  readonly beforeReceivedAtMs: number;
+  readonly after?: InsightsEventCursor;
+  readonly limit: number;
+}
+type InsightsFindLatestEventsInput = {
+  readonly installId: string;
+} | {
+  readonly userId: string;
+  readonly afterInstallId?: string;
+  readonly limit: number;
+};
+interface InsightsCountLatestEventsInput extends InsightsScope {
+  /** A UTC day's start: latest events are counted by the day they fall in. */
+  readonly sinceMs: number;
+  /** Optional OR of one or two fixed predicates; count a matching event once. */
+  readonly bundle?: readonly {
+    readonly field: "from_bundle_id" | "to_bundle_id";
+    readonly value: string;
+    readonly types: readonly BundleEventRow["type"][];
+  }[];
+}
+interface InsightsCountEventsInput {
+  readonly filter: InsightsBundleEventFilter;
+  readonly sinceMs: number;
+  readonly beforeReceivedAtMs: number;
+}
+interface ReleaseReference {
+  readonly releaseId: string;
+  readonly platform: "ios" | "android";
+  readonly channel: string;
+}
+interface InsightsTimeRange {
+  /** Inclusive UTC Unix timestamp in milliseconds. */
+  readonly start: number;
+  /** Exclusive UTC Unix timestamp in milliseconds. */
+  readonly end: number;
+}
+type InsightsCoverage = {
+  readonly kind: "complete";
+  readonly sinceMs: number;
+} | {
+  readonly kind: "partial";
+  readonly sinceMs: number | null;
+};
+interface ReleaseActivityMetrics {
+  readonly downloads: number;
+  readonly launches: number;
+  readonly failedLaunches: number;
+  /** Omitted for lifetime-only bundle-row reads. */
+  readonly uniqueUsers?: number;
+  /** Daily points, present only for period reads. */
+  readonly series?: readonly {
+    readonly startMs: number;
+    readonly launches: number;
+    readonly failedLaunches: number;
+  }[];
+}
+type InsightsGetReleaseActivityInput = {
+  readonly releases: readonly ReleaseReference[];
+  readonly timeRange?: InsightsTimeRange;
+  readonly scope?: never;
+} | {
+  readonly scope: InsightsScope;
+  readonly timeRange: InsightsTimeRange;
+  readonly releases?: never;
+};
+interface InsightsGetReleaseActivityResult {
+  readonly coverage: InsightsCoverage;
+  readonly data: readonly {
+    readonly release?: ReleaseReference;
+    readonly scope?: InsightsScope;
+    readonly metrics: ReleaseActivityMetrics;
+  }[];
+  readonly measuredAtMs: number;
+}
+interface InsightsGetAppUsageInput {
+  readonly channel: string;
+  readonly platform: "all" | "ios" | "android";
+  readonly appVersion?: string;
+  readonly timeRange: InsightsTimeRange;
+  readonly intervalMs: number;
+}
+interface InsightsGetAppUsageResult {
+  readonly coverage: InsightsCoverage;
+  readonly activeInstallations: number;
+  readonly points: readonly {
+    readonly startMs: number;
+    readonly installations: number;
+  }[];
+  readonly appVersions: readonly string[];
+  readonly versions: readonly {
+    readonly name: string;
+    readonly installations: number;
+  }[];
+  readonly platforms: readonly {
+    readonly name: string;
+    readonly installations: number;
+  }[];
+  readonly bundleDistribution: readonly {
+    readonly appVersion: string;
+    readonly platform: "ios" | "android";
+    readonly releaseId: string | null;
+    readonly installations: number;
+  }[];
+  readonly measuredAtMs: number;
+}
+//#endregion
+//#region ../insights/dist/server/schema.d.mts
+//#region src/server/schema.d.ts
+/** How long Insights keeps its rows, in whole days. Lifetime counters are kept. */
+interface InsightsRetention {
+  /** Raw events and hourly rollups. */
+  readonly rawDays: number;
+  /** Daily rollups, and each installation's latest event and the gauges that count it. */
+  readonly dailyDays: number;
+}
+//#endregion
+//#region ../insights/dist/server/reads.d.mts
+//#region src/server/reads.d.ts
+interface InsightsUpdateFailuresInput {
+  readonly platform: "ios" | "android";
+  readonly channel: string;
+  /** A release's failures; without it, the channel's, which need a time range. */
+  readonly releaseId?: string;
+  /** Without it, a release's failures since its first report. */
+  readonly timeRange?: InsightsTimeRange;
+}
+/** Update failures of one stage and reason, and what else their clients knew. */
+interface InsightsFailureBreakdown {
+  readonly stage: string;
+  readonly reason: string;
+  readonly events: number;
+  /** By resource, HTTP status, origin code, and transport, most first. */
+  readonly details: readonly {
+    readonly resource: string | null;
+    readonly httpStatus: number | null;
+    readonly originCode: string | null;
+    readonly transport: string | null;
+    readonly events: number;
+  }[];
+}
+interface InsightsUpdateFailures {
+  readonly coverage: InsightsCoverage;
+  readonly measuredAtMs: number;
+  /** Update failures other than failed checks: each client reports one at most once a UTC day. */
+  readonly failedUpdates: number;
+  /** Installations with such a failure, estimated. */
+  readonly failedInstallations: number;
+  /** Download reports: each installation reports a bundle's download once. */
+  readonly downloads: number;
+  /** Downloads a patch delivered, and those that fell back from a patch to files or the archive. */
+  readonly patchDownloads: number;
+  readonly patchFallbacks: number;
+  /** A channel's failed update checks, installations with one, and its active installations, estimated. */
+  readonly checks?: {
+    readonly failures: number;
+    readonly failedInstallations: number;
+    readonly activeInstallations: number;
+  };
+  /** Over a time range: failures by stage and reason, most first. */
+  readonly breakdown?: readonly InsightsFailureBreakdown[];
+  /**
+   * Over a time range: failed launches, and the recoveries whose crashed
+   * process exited for a reason Android 11+ reported, by reason, most first.
+   */
+  readonly recoveries?: {
+    readonly failedLaunches: number;
+    readonly byExitReason: readonly {
+      readonly exitReason: string;
+      readonly events: number;
+    }[];
+  };
+}
+//#endregion
+//#region ../api-keys/dist/server/model.d.mts
+//#region src/server/model.d.ts
+interface ApiKeyRow {
+  readonly id: string;
+  readonly hash: string;
+  readonly name: string;
+  readonly prefix: string;
+  readonly role: "client";
+  readonly created_at_ms: number;
+  readonly revoked_at_ms: number | null;
+}
+//#endregion
+//#region ../api-keys/dist/server/apiKeys.d.mts
+type ApiKeyMetadata = Omit<ApiKeyRow, "hash">;
+interface CreatedApiKey {
+  /** Plaintext credential. It cannot be recovered after this call returns. */
+  readonly apiKey: string;
+  /** Non-secret metadata. The persisted SHA-256 hash is never exposed. */
+  readonly record: ApiKeyMetadata;
+}
+//#endregion
+//#region src/plugins.d.ts
+/**
+ * The plugins the managed AWS server runs: Insights, and API keys on every
+ * client route. Its Lambda@Edge function imports this list.
+ */
+declare const plugins: readonly [import("@hot-updater/plugin-core").HotUpdaterPlugin<"insights", {
+  readonly bundle_events: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly type: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly install_id: {
+      readonly type: "string";
+      readonly maxLength: 255;
+    };
+    readonly user_id: {
+      readonly type: "string";
+      readonly maxLength: 255;
+      readonly required: false;
+    };
+    readonly from_release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly from_bundle_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly to_release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly to_bundle_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly app_version: {
+      readonly type: "string";
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly metadata: {
+      readonly type: "json";
+    };
+    readonly received_at_ms: {
+      readonly type: "integer";
+    };
+  }, {
+    day: "integer";
+    movement_install_id: "string";
+    bundle_ref: "string";
+  }, {
+    readonly recent: {
+      readonly eq: readonly ["channel", "platform", "day"];
+      readonly sort: readonly ["received_at_ms"];
+    };
+    readonly movementsByInstall: {
+      readonly eq: readonly ["movement_install_id"];
+      readonly sort: readonly ["received_at_ms"];
+    };
+    readonly byBundle: {
+      readonly eq: readonly ["platform", "channel", "type", "bundle_ref", "day"];
+      readonly sort: readonly ["received_at_ms"];
+    };
+    readonly byDay: {
+      readonly eq: readonly ["day"];
+      readonly sort: readonly ["received_at_ms"];
+    };
+  }, readonly ["id"]>;
+  readonly bundle_event_heads: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly install_id: {
+      readonly type: "string";
+      readonly maxLength: 255;
+    };
+    readonly id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly type: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly user_id: {
+      readonly type: "string";
+      readonly maxLength: 255;
+      readonly required: false;
+    };
+    readonly from_release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly from_bundle_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly to_release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+      readonly required: false;
+    };
+    readonly to_bundle_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly app_version: {
+      readonly type: "string";
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly metadata: {
+      readonly type: "json";
+    };
+    readonly received_at_ms: {
+      readonly type: "integer";
+    };
+  }, Readonly<Record<string, import("@hot-updater/plugin-core").FieldType>>, {
+    readonly byUser: {
+      readonly eq: readonly ["user_id"];
+      readonly sort: readonly ["install_id"];
+    };
+  }, readonly ["install_id"]>;
+  readonly insights_overview: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_daily: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_daily: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_lifetime: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_lifetime: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_distribution: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly app_version: {
+      readonly type: "string";
+    };
+    readonly release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "latest_installations", {
+    readonly byScope: {
+      readonly eq: readonly ["channel", "platform"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+    readonly byVersion: {
+      readonly eq: readonly ["channel", "platform", "app_version"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["channel", "platform", "app_version", "release_id", "bucket_start_ms"]>;
+  readonly insights_latest_by_bundle: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly bundle_field: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly bundle_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly type: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "installations", {
+    readonly byBundle: {
+      readonly eq: readonly ["platform", "channel", "bundle_field", "bundle_id", "type"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["platform", "channel", "bundle_field", "bundle_id", "type", "bucket_start_ms"]>;
+  readonly insights_outcomes: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly type: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bundle_ref: {
+      readonly type: "string";
+      readonly maxLength: 41;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "events", {
+    readonly byRef: {
+      readonly eq: readonly ["platform", "channel", "type", "bundle_ref"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["platform", "channel", "type", "bundle_ref", "bucket_start_ms"]>;
+  readonly insights_failures: import("@hot-updater/plugin-core").AggregateDefinition<{
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+    readonly release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly stage: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly reason: {
+      readonly type: "string";
+      readonly maxLength: 64;
+    };
+    readonly detail: {
+      readonly type: "string";
+      readonly maxLength: 160;
+    };
+  }, "events", {
+    readonly byScope: {
+      readonly eq: readonly ["platform", "channel"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["platform", "channel", "bucket_start_ms", "release_id", "stage", "reason", "detail"]>;
+}, {
+  api: {
+    retention: InsightsRetention;
+    recordEvent: (event: BundleEventRow) => Promise<void>;
+    listEvents: (input: InsightsListEventsInput) => Promise<readonly BundleEventRow[]>;
+    findLatestEvents: (input: InsightsFindLatestEventsInput) => Promise<readonly BundleEventRow[]>;
+    countLatestEvents: (input: InsightsCountLatestEventsInput) => Promise<number>;
+    countEvents: (input: InsightsCountEventsInput) => Promise<number>;
+    getReleaseActivity: (input: InsightsGetReleaseActivityInput) => Promise<InsightsGetReleaseActivityResult>;
+    getAppUsage: (input: InsightsGetAppUsageInput) => Promise<InsightsGetAppUsageResult>;
+    getUpdateFailures: (input: InsightsUpdateFailuresInput) => Promise<InsightsUpdateFailures>;
+  };
+  endpoints: import("@hot-updater/plugin-core").PluginEndpoint[];
+}, {}>, import("@hot-updater/plugin-core").HotUpdaterPlugin<"apiKeys", {
+  readonly api_keys: import("@hot-updater/plugin-core").TableDefinition<{
+    readonly id: {
+      readonly type: "string";
+      readonly maxLength: 255;
+    };
+    readonly hash: {
+      readonly type: "string";
+      readonly maxLength: 64;
+      readonly unique: true;
+    };
+    readonly name: {
+      readonly type: "string";
+      readonly maxLength: 64;
+    };
+    readonly prefix: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly role: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly created_at_ms: {
+      readonly type: "integer";
+    };
+    readonly revoked_at_ms: {
+      readonly type: "integer";
+      readonly required: false;
+    };
+  }, {}, {
+    readonly byCreated: {
+      readonly eq: readonly [];
+      readonly sort: readonly ["created_at_ms"];
+    };
+  }, readonly ["id"]>;
+}, {
+  api: {
+    register: (input: {
+      readonly apiKey: string;
+      readonly name: string;
+      readonly createdAtMs?: number;
+    }) => Promise<CreatedApiKey>;
+    provision: (input: {
+      readonly existingApiKey?: string;
+      readonly name: string;
+    }) => Promise<CreatedApiKey>;
+    create(input: {
+      readonly name: string;
+    }): Promise<{
+      readonly apiKey: string;
+      readonly record: ApiKeyMetadata;
+    }>;
+    list(): Promise<readonly ApiKeyMetadata[]>;
+    revoke(input: {
+      readonly id: string;
+    }): Promise<ApiKeyMetadata | null>;
+  };
+  clientAuth: {
+    varyHeaders: string[];
+    authenticate: (headers: Headers) => Promise<boolean>;
+  };
+}, {
+  readonly clientAuth: true;
+}>];
+//#endregion
+export { CloudFrontDownloadUrlOptions, type DynamoDBConfig, S3StorageConfig, S3StorageConfigWithDownloadUrl, cloudFrontDownloadUrl, dynamoDB, migrateDynamoDB, plugins, s3Storage };