@hot-updater/cli-tools 1.0.0-rc.45 → 1.0.0-rc.47

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { Readable } from "stream";
 import { Key as Key$1 } from "node:readline";
-import { AnyHotUpdaterPlugin, Bundle, BundleSigningAdapter, ConfigInput, ConfiguredDatabase, EngineDatabase, HotUpdaterCoreApi, LocalSigningConfig, Migrator, Platform, PluginClientPlugin, RequiredDeep, SchemaGenerator, SigningConfig, StorageAdapter, StorageAdapterWith, StoragePutResult, ToolingDatabase } from "@hot-updater/plugin-core";
+import { AnyHotUpdaterPlugin, BundleSigningAdapter, ConfigInput, ConfiguredDatabase, EngineDatabase, HotUpdaterCoreApi, LocalSigningConfig, Migrator, Platform, PluginClientPlugin, RequiredDeep, SchemaGenerator, SigningConfig, StorageAdapter, StorageAdapterWith, StoragePutResult, ToolingDatabase } from "@hot-updater/plugin-core";
 import { Readable as Readable$1, Writable } from "node:stream";
 import { ManifestArchive } from "@hot-updater/protocol";
 //#region src/BuildLogger.d.ts
@@ -369,17 +369,13 @@ declare const writeHotUpdaterConfig: (scaffold: HotUpdaterConfigScaffold, filePa
 /**
  * Writes hot-updater.config.ts and says what it did. `settings` names the
  * provider in messages, such as "Supabase". A config it cannot merge is
- * kept, with what to add to it. The plugins file an older init wrote is
- * removed only after a successful config write and when the config no longer
- * references it. A file the project wrote is kept with a cleanup notice.
+ * kept, with what to add to it.
  */
 declare const writeHotUpdaterFiles: (scaffold: HotUpdaterConfigScaffold, { cwd, settings }: {
   cwd?: string;
   settings: string;
 }) => Promise<{
   readonly config: WriteHotUpdaterConfigResult;
-  /** What became of hotUpdater.plugins.ts, when there was one. */
-  readonly pluginsFile?: "removed" | "kept";
 }>;
 //#endregion
 //#region src/hotUpdaterEnv.d.ts
@@ -687,28 +683,6 @@ declare const makeEnv: (newEnvVars: Record<string, EnvVarValue>, filePath?: stri
  */
 declare const moduleSpecifiersOf: (fileName: string, source: string) => string[];
 //#endregion
-//#region src/promoteBundle.d.ts
-type PromoteStorageAdapter = StorageAdapterWith<"get" | "put" | "exists" | "delete">;
-declare const LEGACY_BUNDLE_ERROR = "This OTA bundle was created by a version that does not support manifest.json. Copy bundle is not available.";
-declare function createCopiedBundleArtifacts({ bundle, config, nextBundleId, storageAdapter }: {
-  bundle: Bundle;
-  config: ConfigResponse;
-  nextBundleId: string;
-  storageAdapter: PromoteStorageAdapter;
-}): Promise<{
-  bundle: {
-    id: string;
-    metadata: import("@hot-updater/protocol").BundleMetadata | undefined;
-    assetBaseStorageUri: string;
-    patches: never[];
-    manifestFileHash: string;
-    manifestStorageUri: string;
-    platform: import("@hot-updater/protocol").Platform;
-    gitCommitHash: string | null;
-  };
-  uploadedStorageUris: string[];
-}>;
-//#endregion
 //#region ../../node_modules/.pnpm/@clack+core@1.4.3/node_modules/@clack/core/dist/index.d.mts
 declare const actions: readonly ["up", "down", "left", "right", "space", "enter", "cancel"];
 type Action = (typeof actions)[number];
@@ -1933,8 +1907,6 @@ declare const getStorageFileByteSize: (filePath: string) => Promise<number>;
 declare const putStorageFile: (storage: StorageAdapterWith<"put">, key: string, filePath: string) => Promise<StoragePutResult & {
   byteSize: number;
 }>;
-declare const writeStorageFile: (storage: StorageAdapterWith<"get">, storageUri: string, filePath: string) => Promise<void>;
-declare const writeStorageResponseFile: (response: Response, filePath: string) => Promise<void>;
 //#endregion
 //#region src/transformEnv.d.ts
 declare const transformEnv: <T extends Record<string, string>>(filename: string, env: T) => string;
@@ -1953,4 +1925,4 @@ type TransformTemplateArgs<T extends string> = { [Key in ExtractPlaceholders<T>]
  */
 declare function transformTemplate<T extends string>(templateString: T, values: TransformTemplateArgs<T>): string;
 //#endregion
-export { AppClientCredential, AppClientPlugin, AssembleServerOptions, AssembledServer, BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ClientAuthSpec, ClientCredentialSpec, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, PromptProgress, PromptSpinner, ProviderConfig, ProvisionedClientCredential, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, ServerClientEndpoint, ServerDefinition, ServerDefinitionError, WriteHotUpdaterConfigResult, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArtifacts, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles, writeStorageFile, writeStorageResponseFile };
+export { AppClientCredential, AppClientPlugin, AssembleServerOptions, AssembledServer, BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ClientAuthSpec, ClientCredentialSpec, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, PromptProgress, PromptSpinner, ProviderConfig, ProvisionedClientCredential, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, ServerClientEndpoint, ServerDefinition, ServerDefinitionError, WriteHotUpdaterConfigResult, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };

package/dist/index.mjs

@@ -16,14 +16,14 @@ import l__default from "node:readline";
 import tty, { ReadStream } from "node:tty";
 import Ei, { appendFileSync, createReadStream, createWriteStream, existsSync, lstatSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import path$1, { basename, dirname as dirname$1, join, posix, win32 } from "node:path";
-import { createBundleStorageKey, createMemoryAdapter, createStorageAdapter, createStorageRootUriWithPath, getContentType, getManifestAssetDownloadPath, getManifestAssetStoragePath, isContentAddressedAssetFileHash, isRemoteDatabase, resolveManifestAssetStorageUri, toolingTargetOf } from "@hot-updater/plugin-core";
+import { createMemoryAdapter, createStorageAdapter, getContentType, isRemoteDatabase, toolingTargetOf } from "@hot-updater/plugin-core";
 import { createHotUpdater } from "@hot-updater/server";
 import os, { constants } from "node:os";
 import crypto$1, { createHash, randomBytes, randomUUID } from "node:crypto";
 import fs$2 from "node:fs/promises";
 import As, { Duplex, PassThrough as PassThrough$1, Readable as Readable$1, Transform, Writable, getDefaultHighWaterMark } from "node:stream";
 import { finished, pipeline } from "node:stream/promises";
-import { brotliDecompressSync, constants as constants$1, createBrotliCompress } from "node:zlib";
+import { constants as constants$1, createBrotliCompress } from "node:zlib";
 import { EventEmitter as EventEmitter$1, addAbortListener, on, once, setMaxListeners } from "node:events";
 import { StringDecoder } from "node:string_decoder";
 import * as Ms from "zlib";
@@ -36,7 +36,6 @@ import { serialize } from "node:v8";
 import { Buffer as Buffer$2 } from "node:buffer";
 import { Visitor, parseSync } from "oxc-parser";
 import { loadConfig as loadConfig$1 } from "unconfig";
-import { getManifestFileHash, stripBundleArtifactMetadata } from "@hot-updater/protocol";
 import { transformSync } from "oxc-transform";
 //#endregion
 //#region src/colors.ts
@@ -25107,8 +25106,6 @@ const normalizeImportInfos = (imports) => {
 	return Array.from(collectedImports.entries()).sort(([a], [b]) => {
 		const isABuild = a.startsWith("@hot-updater/");
 		if (isABuild !== b.startsWith("@hot-updater/")) return isABuild ? -1 : 1;
-		if (a === "dotenv/config") return -1;
-		if (b === "dotenv/config") return 1;
 		const isAdminA = a === "firebase-admin";
 		if (isAdminA !== (b === "firebase-admin")) return isAdminA ? -1 : 1;
 		return a.localeCompare(b);
@@ -44141,8 +44138,7 @@ const MANAGED_IMPORT_PACKAGES = /* @__PURE__ */ new Set([
 const MANAGED_HELPER_NAMES = /* @__PURE__ */ new Set([
 	"awsOptions",
 	"commonOptions",
-	"credential",
-	"storageOptions"
+	"credential"
 ]);
 const KNOWN_BUILD_CALLEES = /* @__PURE__ */ new Set([
 	"bare",
@@ -44801,20 +44797,10 @@ const renderServerSettings = (scaffold) => {
 		].join("\n")
 	].filter(Boolean).join("\n\n");
 };
-/** Where an older init wrote a managed server's plugins, which the config lists now. */
-const PLUGINS_FILE_PATH = "hotUpdater.plugins.ts";
-/**
-* Whether `text` is the plugins file an older init wrote: comments and a
-* re-export of a provider package's former `plugins`, which the config's
-* `plugins` list replaces.
-*/
-const isGeneratedPluginsFile = (text) => /^export\{plugins\}from(["'])@hot-updater\/[\w-]+\1;?$/u.test(text.replace(/^\s*\/\/.*$/gmu, "").replace(/\s+/gu, ""));
 /**
 * Writes hot-updater.config.ts and says what it did. `settings` names the
 * provider in messages, such as "Supabase". A config it cannot merge is
-* kept, with what to add to it. The plugins file an older init wrote is
-* removed only after a successful config write and when the config no longer
-* references it. A file the project wrote is kept with a cleanup notice.
+* kept, with what to add to it.
 */
 const writeHotUpdaterFiles = async (scaffold, { cwd = process.cwd(), settings }) => {
 	const config = await writeHotUpdaterConfig(scaffold, path.join(cwd, HOT_UPDATER_CONFIG_PATH));
@@ -44826,33 +44812,7 @@ const writeHotUpdaterFiles = async (scaffold, { cwd = process.cwd(), settings })
 		"",
 		renderServerSettings(scaffold)
 	].join("\n"));
-	const pluginsPath = path.join(cwd, PLUGINS_FILE_PATH);
-	const pluginsText = await readTextFile(pluginsPath);
-	if (pluginsText === null) return { config };
-	if (config.status === "skipped") return {
-		config,
-		pluginsFile: "kept"
-	};
-	if ((await fs$1.readFile(config.path, "utf-8")).includes("./hotUpdater.plugins")) {
-		p.log.warn(`Kept '${PLUGINS_FILE_PATH}': '${HOT_UPDATER_CONFIG_PATH}' still references it.`);
-		return {
-			config,
-			pluginsFile: "kept"
-		};
-	}
-	if (isGeneratedPluginsFile(pluginsText)) {
-		await fs$1.rm(pluginsPath);
-		p.log.success(`Removed '${PLUGINS_FILE_PATH}': \`plugins\` in '${HOT_UPDATER_CONFIG_PATH}' lists the plugins the server runs.`);
-		return {
-			config,
-			pluginsFile: "removed"
-		};
-	}
-	p.log.warn(`Nothing reads '${pluginsPath}' anymore: \`plugins\` in '${HOT_UPDATER_CONFIG_PATH}' lists the plugins the server runs. Delete it.`);
-	return {
-		config,
-		pluginsFile: "kept"
-	};
+	return { config };
 };
 //#endregion
 //#region src/initOptions.ts
@@ -45280,7 +45240,6 @@ const isServerDefinition = (value) => isRecord(value) && isRecord(value.database
 */
 const serverDefinitionOf = (value, source = "The server definition") => {
 	if (isServerDefinition(value)) return value;
-	if (isRecord(value) && "handlers" in value) throw new ServerDefinitionError(`${source} exports a hotUpdater from an older @hot-updater/server. Upgrade @hot-updater/server to the version of hot-updater.`);
 	throw new ServerDefinitionError(`${source} must export hotUpdater: the server createHotUpdater({ database, storage, plugins }) returns.`);
 };
 const fail = (message) => {
@@ -45496,305 +45455,6 @@ const moduleSpecifiersOf = (fileName, source) => {
 	])];
 };
 //#endregion
-//#region src/storageFiles.ts
-const getStorageFileByteSize = async (filePath) => {
-	const { size } = await fs$2.stat(filePath, { bigint: true });
-	if (size < 0n || size > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error("Storage file size must be a non-negative safe integer.");
-	return Number(size);
-};
-const putStorageFile = async (storage, key, filePath) => {
-	const byteSize = await getStorageFileByteSize(filePath);
-	const source = createReadStream(filePath);
-	try {
-		return {
-			...await storage.put({
-				key: path$1.posix.join(key, path$1.basename(filePath)),
-				body: Readable$1.toWeb(source),
-				contentLength: byteSize,
-				contentType: getContentType(filePath)
-			}),
-			byteSize
-		};
-	} finally {
-		source.destroy();
-	}
-};
-const writeStorageFile = async (storage, storageUri, filePath) => {
-	const { response } = await storage.get({ storageUri });
-	if (response === null) throw new Error(`Storage object not found: ${storageUri}`);
-	await writeStorageResponseFile(response, filePath);
-};
-const writeStorageResponseFile = async (response, filePath) => {
-	await fs$2.mkdir(path$1.dirname(filePath), { recursive: true });
-	if (response.body === null) {
-		await fs$2.writeFile(filePath, /* @__PURE__ */ new Uint8Array());
-		return;
-	}
-	try {
-		await pipeline(Readable$1.fromWeb(response.body), createWriteStream(filePath));
-	} catch (error) {
-		await fs$2.rm(filePath, { force: true });
-		throw error;
-	}
-};
-//#endregion
-//#region src/promoteBundle.ts
-const LEGACY_BUNDLE_ERROR = "This OTA bundle was created by a version that does not support manifest.json. Copy bundle is not available.";
-const SIGNED_HASH_PREFIX = "sig:";
-const PROMOTE_ASSET_CONCURRENCY = 8;
-function isSignedFileHash(fileHash) {
-	return fileHash.startsWith(SIGNED_HASH_PREFIX);
-}
-async function getFileHash(filepath) {
-	const file = await fs$2.readFile(filepath);
-	return crypto$1.createHash("sha256").update(file).digest("hex");
-}
-async function runWithConcurrency(items, concurrency, task) {
-	let nextIndex = 0;
-	const workerCount = Math.min(concurrency, items.length);
-	await Promise.all(Array.from({ length: workerCount }, async () => {
-		while (nextIndex < items.length) {
-			const itemIndex = nextIndex;
-			nextIndex += 1;
-			await task(items[itemIndex]);
-		}
-	}));
-}
-function verifySignedFileHash({ actualFileHash, publicKey, signedFileHash }) {
-	try {
-		return crypto$1.verify("RSA-SHA256", Buffer.from(actualFileHash, "hex"), publicKey, Buffer.from(signedFileHash.slice(4), "base64"));
-	} catch {
-		return false;
-	}
-}
-const getRelativeStorageDir = (relativePath) => {
-	const normalized = relativePath.replace(/\\/g, "/");
-	const dirname = path$1.posix.dirname(normalized);
-	return dirname === "." ? "" : dirname;
-};
-function resolvePreparedUploadPath(rootDir, assetPath) {
-	const normalizedAssetPath = assetPath.replaceAll("\\", "/");
-	const outputPath = path$1.resolve(rootDir, "upload-artifacts", `${normalizedAssetPath}.br`);
-	const relativePath = path$1.relative(rootDir, outputPath);
-	if (relativePath.startsWith("..") || path$1.isAbsolute(relativePath) || normalizedAssetPath.startsWith("/")) throw new Error(`Invalid manifest asset path: ${assetPath}`);
-	return outputPath;
-}
-async function prepareManifestAssetUploadFile({ assetPath, sourcePath, workDir }) {
-	if (getManifestAssetDownloadPath(assetPath) === assetPath) return sourcePath;
-	const uploadPath = resolvePreparedUploadPath(workDir, assetPath);
-	await fs$2.mkdir(path$1.dirname(uploadPath), { recursive: true });
-	await pipeline(createReadStream(sourcePath), createBrotliCompress({ params: { [constants$1.BROTLI_PARAM_QUALITY]: 11 } }), createWriteStream(uploadPath));
-	return uploadPath;
-}
-async function prepareContentAddressedUploadFile({ sourcePath, storagePath, workDir }) {
-	const filename = path$1.posix.basename(storagePath);
-	if (path$1.basename(sourcePath) === filename) return sourcePath;
-	const uploadPath = path$1.join(workDir, "upload-artifacts", "content-addressed", filename);
-	await fs$2.mkdir(path$1.dirname(uploadPath), { recursive: true });
-	await fs$2.copyFile(sourcePath, uploadPath);
-	return uploadPath;
-}
-async function prepareManifestAssetUploadTargets({ extractDir, manifest, workDir }) {
-	const targets = /* @__PURE__ */ new Map();
-	const assetPaths = Object.keys(manifest.assets ?? {}).sort((left, right) => left.localeCompare(right));
-	for (const assetPath of assetPaths) {
-		const asset = manifest.assets?.[assetPath];
-		if (!asset?.fileHash) throw new Error(`Manifest file hash not found for ${assetPath}`);
-		const sourcePath = resolveExtractedPath(extractDir, assetPath);
-		const uploadSourcePath = await prepareManifestAssetUploadFile({
-			assetPath,
-			sourcePath,
-			workDir
-		});
-		const downloadByteSize = await getStorageFileByteSize(uploadSourcePath);
-		const downloadPath = getManifestAssetDownloadPath(assetPath);
-		const downloadFileHash = downloadPath !== assetPath ? await getFileHash(uploadSourcePath) : void 0;
-		if (downloadFileHash !== void 0 && !isContentAddressedAssetFileHash(downloadFileHash)) throw new Error(`Prepared asset hash must be a lowercase SHA-256 hash: ${assetPath}`);
-		const nextAsset = {
-			...asset,
-			byteSize: (await fs$2.stat(sourcePath)).size,
-			downloadByteSize
-		};
-		delete nextAsset.downloadFileHash;
-		if (downloadFileHash !== void 0) nextAsset.downloadFileHash = downloadFileHash;
-		manifest.assets[assetPath] = nextAsset;
-		const storagePath = getManifestAssetStoragePath({
-			assetPath: downloadPath,
-			downloadFileHash,
-			fileHash: asset.fileHash
-		});
-		const contentAddressedUploadPath = await prepareContentAddressedUploadFile({
-			sourcePath: uploadSourcePath,
-			storagePath,
-			workDir
-		});
-		targets.set(storagePath, {
-			assetPath: downloadPath,
-			downloadFileHash,
-			fileHash: asset.fileHash,
-			storagePath,
-			uploadSourcePath: contentAddressedUploadPath
-		});
-	}
-	return [...targets.values()];
-}
-function resolveExtractedPath(rootDir, entryName) {
-	const normalizedEntryName = entryName.replaceAll("\\", "/");
-	const entryPath = path$1.resolve(rootDir, normalizedEntryName);
-	const relativePath = path$1.relative(rootDir, entryPath);
-	if (relativePath.startsWith("..") || path$1.isAbsolute(relativePath) || normalizedEntryName.startsWith("/")) throw new Error(`Invalid manifest asset path: ${entryName}`);
-	return entryPath;
-}
-async function downloadStorageObject(storageUri, storageAdapter, outputPath) {
-	const protocol = new URL(storageUri).protocol.replace(":", "");
-	if (storageAdapter?.protocol === protocol) {
-		await writeStorageFile(storageAdapter, storageUri, outputPath);
-		return;
-	}
-	if (protocol === "http" || protocol === "https") {
-		await downloadFromUrl(storageUri, outputPath);
-		return;
-	}
-	throw new Error(`No storage adapter for protocol: ${protocol}`);
-}
-async function downloadFromUrl(fileUrl, filePath) {
-	const response = await fetch(fileUrl);
-	if (!response.ok) throw new Error(`Failed to download storage object: ${response.statusText}`);
-	await writeStorageResponseFile(response, filePath);
-}
-async function downloadManifestAssets({ bundle, manifest, outputDir, storageAdapter, workDir }) {
-	await runWithConcurrency(Object.keys(manifest.assets ?? {}).sort((left, right) => left.localeCompare(right)), PROMOTE_ASSET_CONCURRENCY, async (assetPath) => {
-		const asset = manifest.assets?.[assetPath];
-		if (!asset?.fileHash) throw new Error(`Manifest file hash not found for ${assetPath}`);
-		const downloadPath = getManifestAssetDownloadPath(assetPath);
-		const storageUri = resolveManifestAssetStorageUri({
-			assetBaseStorageUri: bundle.assetBaseStorageUri,
-			assetPath: downloadPath,
-			downloadFileHash: asset.downloadFileHash,
-			fileHash: asset.fileHash
-		});
-		const transferPath = resolveExtractedPath(workDir, `downloads/${downloadPath}`);
-		await fs$2.mkdir(path$1.dirname(transferPath), { recursive: true });
-		await downloadStorageObject(storageUri, storageAdapter, transferPath);
-		if (asset.downloadFileHash) {
-			if (await getFileHash(transferPath) !== asset.downloadFileHash.toLowerCase()) throw new Error(`Manifest download hash mismatch for ${assetPath}`);
-		}
-		const outputPath = resolveExtractedPath(outputDir, assetPath);
-		await fs$2.mkdir(path$1.dirname(outputPath), { recursive: true });
-		if (downloadPath === assetPath) await fs$2.copyFile(transferPath, outputPath);
-		else await fs$2.writeFile(outputPath, brotliDecompressSync(await fs$2.readFile(transferPath)));
-		if (await getFileHash(outputPath) !== asset.fileHash.toLowerCase()) throw new Error(`Manifest file hash mismatch for ${assetPath}`);
-	});
-}
-async function createCopiedBundleArtifacts({ bundle, config, nextBundleId, storageAdapter }) {
-	const workDir = await fs$2.mkdtemp(path$1.join(os.tmpdir(), "hot-updater-console-promote-"));
-	const extractDir = path$1.join(workDir, "bundle");
-	const sourceManifestPath = path$1.join(workDir, "source-manifest.json");
-	const manifestPath = path$1.join(extractDir, "manifest.json");
-	const uploadedStorageUris = [];
-	await fs$2.mkdir(extractDir, { recursive: true });
-	try {
-		await downloadStorageObject(bundle.manifestStorageUri, storageAdapter, sourceManifestPath);
-		const actualManifestHash = await getFileHash(sourceManifestPath);
-		const signingSession = await prepareBundleSigning(config.signing);
-		if (isSignedFileHash(bundle.manifestFileHash)) {
-			if (!signingSession) throw new Error("Cannot copy a signed bundle without enabled bundle signing configuration.");
-			if (!verifySignedFileHash({
-				actualFileHash: actualManifestHash,
-				publicKey: signingSession.publicKey,
-				signedFileHash: bundle.manifestFileHash
-			})) throw new Error("Source manifest signature verification failed.");
-		} else if (actualManifestHash !== bundle.manifestFileHash.toLowerCase()) throw new Error("Source manifest file hash verification failed.");
-		const manifest = JSON.parse(await fs$2.readFile(sourceManifestPath, "utf8"));
-		if (!manifest.assets || typeof manifest.assets !== "object") throw new Error(LEGACY_BUNDLE_ERROR);
-		await downloadManifestAssets({
-			bundle,
-			manifest,
-			outputDir: extractDir,
-			storageAdapter,
-			workDir
-		});
-		manifest.bundleId = nextBundleId;
-		const assetPaths = Object.keys(manifest.assets ?? {}).sort((left, right) => left.localeCompare(right));
-		const sourceIsSigned = isSignedFileHash(getManifestFileHash(bundle));
-		const manifestHasSignatures = assetPaths.some((assetPath) => Boolean(manifest.assets?.[assetPath]?.signature));
-		if (!signingSession && (sourceIsSigned || manifestHasSignatures)) throw new Error("Cannot copy a signed bundle without enabled bundle signing configuration.");
-		if (signingSession) {
-			await runWithConcurrency(assetPaths, PROMOTE_ASSET_CONCURRENCY, async (assetPath) => {
-				const asset = manifest.assets?.[assetPath];
-				if (!asset?.fileHash) throw new Error(`Manifest file hash not found for ${assetPath}`);
-				if (await getFileHash(resolveExtractedPath(extractDir, assetPath)) !== asset.fileHash.toLowerCase()) throw new Error(`Manifest file hash mismatch for ${assetPath}`);
-			});
-			await runWithConcurrency(assetPaths, PROMOTE_ASSET_CONCURRENCY, async (assetPath) => {
-				const asset = manifest.assets?.[assetPath];
-				if (!asset?.fileHash) throw new Error(`Manifest file hash not found for ${assetPath}`);
-				asset.signature = await signingSession.signFileHash(asset.fileHash);
-			});
-		}
-		const assetUploadTargets = await prepareManifestAssetUploadTargets({
-			extractDir,
-			manifest,
-			workDir
-		});
-		const archivePath = path$1.join(workDir, "bundle.tar.br");
-		manifest.archive = await createTarBrTargetFiles({
-			outfile: archivePath,
-			targetFiles: assetPaths.map((name) => ({
-				name,
-				path: resolveExtractedPath(extractDir, name)
-			}))
-		});
-		await fs$2.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
-		const manifestHash = await getFileHash(manifestPath);
-		const nextManifestFileHash = signingSession ? `${SIGNED_HASH_PREFIX}${await signingSession.signFileHash(manifestHash)}` : manifestHash;
-		const archiveUpload = await putStorageFile(storageAdapter, createBundleStorageKey(nextBundleId), archivePath);
-		uploadedStorageUris.push(archiveUpload.storageUri);
-		const manifestUpload = await putStorageFile(storageAdapter, createBundleStorageKey(nextBundleId), manifestPath);
-		uploadedStorageUris.push(manifestUpload.storageUri);
-		const assetBaseStorageUri = createStorageRootUriWithPath(manifestUpload.storageUri, nextBundleId, "assets");
-		for (const assetUploadTarget of assetUploadTargets) {
-			const storageUri = resolveManifestAssetStorageUri({
-				assetBaseStorageUri,
-				assetPath: assetUploadTarget.assetPath,
-				downloadFileHash: assetUploadTarget.downloadFileHash,
-				fileHash: assetUploadTarget.fileHash
-			});
-			const { exists } = await storageAdapter.exists({ storageUri });
-			if (!exists) await putStorageFile(storageAdapter, getRelativeStorageDir(assetUploadTarget.storagePath) ? `assets/${getRelativeStorageDir(assetUploadTarget.storagePath)}` : "assets", assetUploadTarget.uploadSourcePath);
-		}
-		return {
-			bundle: {
-				...bundle,
-				id: nextBundleId,
-				metadata: stripBundleArtifactMetadata(bundle.metadata),
-				assetBaseStorageUri,
-				patches: [],
-				manifestFileHash: nextManifestFileHash,
-				manifestStorageUri: manifestUpload.storageUri
-			},
-			uploadedStorageUris
-		};
-	} catch (error) {
-		await deleteUploadedCopy(storageAdapter, uploadedStorageUris);
-		throw error;
-	} finally {
-		await fs$2.rm(workDir, {
-			recursive: true,
-			force: true
-		});
-	}
-}
-async function deleteUploadedCopy(storageAdapter, storageUris) {
-	if (storageUris.length === 0) return;
-	for (const storageUri of new Set(storageUris)) try {
-		const protocol = new URL(storageUri).protocol.replace(":", "");
-		if (storageAdapter.protocol === protocol) await storageAdapter.delete({ storageUri });
-		else if (protocol !== "http" && protocol !== "https") throw new Error(`No storage adapter for protocol: ${protocol}`);
-	} catch (error) {
-		console.error("Failed to delete uploaded bundle copy:", error);
-	}
-}
-//#endregion
 //#region src/resolvePackageVersion.ts
 const require$1 = createRequire(import.meta.url);
 const HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV = "HOT_UPDATER_SERVER_PACKAGE_VERSION";
@@ -45836,6 +45496,30 @@ const resolveHotUpdaterServerVersion = (currentPackageName, options) => {
 	return process.env["HOT_UPDATER_SERVER_PACKAGE_VERSION"]?.trim() || resolvePackageVersion(currentPackageName, options);
 };
 //#endregion
+//#region src/storageFiles.ts
+const getStorageFileByteSize = async (filePath) => {
+	const { size } = await fs$2.stat(filePath, { bigint: true });
+	if (size < 0n || size > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error("Storage file size must be a non-negative safe integer.");
+	return Number(size);
+};
+const putStorageFile = async (storage, key, filePath) => {
+	const byteSize = await getStorageFileByteSize(filePath);
+	const source = createReadStream(filePath);
+	try {
+		return {
+			...await storage.put({
+				key: path$1.posix.join(key, path$1.basename(filePath)),
+				body: Readable$1.toWeb(source),
+				contentLength: byteSize,
+				contentType: getContentType(filePath)
+			}),
+			byteSize
+		};
+	} finally {
+		source.destroy();
+	}
+};
+//#endregion
 //#region src/transformEnv.ts
 const transformEnv = (filename, env) => {
 	const code = fs.readFileSync(filename, "utf-8");
@@ -45862,4 +45546,4 @@ function transformTemplate(templateString, values) {
 	return result;
 }
 //#endregion
-export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, InitEnvFileError, InitError, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, MissingInitInputsError, ServerDefinitionError, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArtifacts, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles, writeStorageFile, writeStorageResponseFile };
+export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, InitEnvFileError, InitError, LegacyInfrastructureError, MissingInitInputsError, ServerDefinitionError, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/cli-tools",
-  "version": "1.0.0-rc.45",
+  "version": "1.0.0-rc.47",
   "type": "module",
   "engines": {
     "node": ">=20.19.0"
@@ -49,9 +49,9 @@
     "oxc-parser": "0.141.0",
     "oxc-transform": "0.141.0",
     "unconfig": "7.5.0",
-    "@hot-updater/protocol": "1.0.0-rc.45",
-    "@hot-updater/plugin-core": "1.0.0-rc.45",
-    "@hot-updater/server": "1.0.0-rc.45"
+    "@hot-updater/protocol": "1.0.0-rc.47",
+    "@hot-updater/plugin-core": "1.0.0-rc.47",
+    "@hot-updater/server": "1.0.0-rc.47"
   },
   "devDependencies": {
     "@clack/prompts": "1.7.0",
@@ -65,7 +65,7 @@
     "tar": "^7.5.16",
     "verkit": "0.4.0",
     "workspace-tools": "^0.41.7",
-    "@hot-updater/test-utils": "1.0.0-rc.45"
+    "@hot-updater/test-utils": "1.0.0-rc.47"
   },
   "inlinedDependencies": {
     "@babel/code-frame": "7.29.0",