@hot-updater/cloudflare 1.0.0-rc.2 → 1.0.0-rc.21

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/cloudflare",
   "type": "module",
-  "version": "1.0.0-rc.2",
+  "version": "1.0.0-rc.21",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -17,18 +17,12 @@
       "require": "./dist/init/index.cjs"
     },
     "./worker": {
-      "types": "./dist/worker/index.d.cts",
       "import": "./dist/worker/index.mjs",
       "require": "./dist/worker/index.cjs",
       "default": "./dist/worker/index.mjs"
     },
     "./worker/config": "./worker/wrangler.json",
     "./worker/wrangler.json": "./worker/wrangler.json",
-    "./iac": {
-      "types": "./dist/iac/index.d.cts",
-      "import": "./dist/iac/index.mjs",
-      "require": "./dist/iac/index.cjs"
-    },
     "./package.json": "./package.json"
   },
   "license": "MIT",
@@ -52,6 +46,8 @@
     "worker/migrations",
     "worker/src",
     "worker/wrangler.json",
+    "!**/*.spec.ts",
+    "!worker/src/testWorker.ts",
     "package.json"
   ],
   "dependencies": {
@@ -60,10 +56,10 @@
     "cloudflare": "4.2.0",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/cli-tools": "1.0.0-rc.1",
-    "@hot-updater/plugin-core": "1.0.0-rc.1",
-    "@hot-updater/core": "1.0.0-rc.0",
-    "@hot-updater/server": "1.0.0-rc.1"
+    "@hot-updater/protocol": "1.0.0-rc.21",
+    "@hot-updater/server": "1.0.0-rc.21",
+    "@hot-updater/cli-tools": "1.0.0-rc.21",
+    "@hot-updater/plugin-core": "1.0.0-rc.21"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "0.13.0",
@@ -75,11 +71,11 @@
     "toml": "^3.0.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "verkit": "0.3.2",
+    "verkit": "0.4.0",
     "vitest": "4.1.4",
     "wrangler": "^4.69.0",
     "xdg-app-paths": "^8.3.0",
-    "@hot-updater/test-utils": "1.0.0-rc.1"
+    "@hot-updater/test-utils": "1.0.0-rc.21"
   },
   "scripts": {
     "build": "tsdown && pnpm build:worker",

package/sql/bundles.sql

@@ -1,190 +1,109 @@
-CREATE TABLE channels (
-  id TEXT COLLATE BINARY PRIMARY KEY NOT NULL,
-  name TEXT COLLATE BINARY NOT NULL,
-  CONSTRAINT channels_id_length_check CHECK (length(id) BETWEEN 1 AND 255),
-  CONSTRAINT channels_name_length_check CHECK (length(name) BETWEEN 1 AND 255)
-);
-
-CREATE TABLE bundles (
-  id TEXT PRIMARY KEY NOT NULL,
-  platform TEXT NOT NULL,
-  file_hash TEXT NOT NULL,
-  git_commit_hash TEXT,
-  storage_uri TEXT NOT NULL,
-  archive_byte_size REAL NOT NULL,
-  metadata TEXT NOT NULL DEFAULT '{}',
-  manifest_storage_uri TEXT,
-  manifest_file_hash TEXT,
-  asset_base_storage_uri TEXT,
-  CONSTRAINT bundles_archive_byte_size_check CHECK (
-    archive_byte_size >= 0 AND archive_byte_size <= 9007199254740991
-  )
-);
-
-CREATE TABLE bundle_patches (
-  id TEXT PRIMARY KEY NOT NULL,
-  bundle_id TEXT NOT NULL,
-  base_bundle_id TEXT NOT NULL,
-  base_file_hash TEXT NOT NULL,
-  patch_file_hash TEXT NOT NULL,
-  patch_storage_uri TEXT NOT NULL,
-  byte_size REAL NOT NULL,
-  order_index INTEGER NOT NULL DEFAULT 0,
-  CONSTRAINT bundle_patches_byte_size_check CHECK (
-    byte_size >= 0 AND byte_size <= 9007199254740991
-  ),
-  CONSTRAINT bundle_patches_bundle_id_fk FOREIGN KEY (bundle_id)
-    REFERENCES bundles(id) ON UPDATE RESTRICT ON DELETE CASCADE,
-  CONSTRAINT bundle_patches_base_bundle_id_fk FOREIGN KEY (base_bundle_id)
-    REFERENCES bundles(id) ON UPDATE RESTRICT ON DELETE CASCADE
-);
-
-CREATE TABLE releases (
-  id TEXT PRIMARY KEY NOT NULL,
-  revision INTEGER NOT NULL,
-  scope_key TEXT COLLATE BINARY NOT NULL,
-  channel_id TEXT COLLATE BINARY NOT NULL,
-  platform TEXT NOT NULL,
-  kind TEXT NOT NULL,
-  bundle_id TEXT,
-  strategy TEXT NOT NULL,
-  target_app_version TEXT,
-  fingerprint_hash TEXT,
-  enabled INTEGER NOT NULL,
-  should_force_update INTEGER NOT NULL,
-  message TEXT,
-  rollout_cohort_count INTEGER NOT NULL DEFAULT 1000,
-  target_cohorts TEXT NOT NULL DEFAULT '[]',
-  operation TEXT NOT NULL,
-  source_release_id TEXT,
-  created_at_ms REAL NOT NULL,
-  updated_at_ms REAL NOT NULL,
-  CONSTRAINT releases_revision_check CHECK (revision >= 1),
-  CONSTRAINT releases_kind_bundle_check CHECK (
-    (kind = 'BUNDLE' AND bundle_id IS NOT NULL)
-    OR (kind = 'EMBEDDED' AND bundle_id IS NULL)
-  ),
-  CONSTRAINT releases_strategy_target_check CHECK (
-    (strategy = 'APP_VERSION' AND target_app_version IS NOT NULL AND fingerprint_hash IS NULL)
-    OR (strategy = 'FINGERPRINT' AND target_app_version IS NULL AND fingerprint_hash IS NOT NULL)
-  ),
-  CONSTRAINT releases_rollout_cohort_count_check CHECK (
-    rollout_cohort_count >= 0 AND rollout_cohort_count <= 1000
-  ),
-  CONSTRAINT releases_operation_check CHECK (
-    operation IN ('DEPLOY', 'PROMOTE', 'ROLLBACK')
-  ),
-  CONSTRAINT releases_channel_id_fk FOREIGN KEY (channel_id)
-    REFERENCES channels(id) ON UPDATE RESTRICT ON DELETE RESTRICT,
-  CONSTRAINT releases_bundle_id_fk FOREIGN KEY (bundle_id)
-    REFERENCES bundles(id) ON UPDATE RESTRICT ON DELETE RESTRICT,
-  CONSTRAINT releases_source_release_id_fk FOREIGN KEY (source_release_id)
-    REFERENCES releases(id) ON UPDATE RESTRICT ON DELETE SET NULL
-);
-
-CREATE TABLE release_catalogs (
-  scope_key TEXT COLLATE BINARY PRIMARY KEY NOT NULL,
-  catalog_id TEXT NOT NULL,
-  strategy TEXT NOT NULL,
-  channel_id TEXT COLLATE BINARY NOT NULL,
-  channel_key TEXT COLLATE BINARY NOT NULL,
-  platform TEXT NOT NULL,
-  fingerprint_hash TEXT,
-  generation REAL NOT NULL,
-  payload TEXT NOT NULL,
-  catalog_hash TEXT NOT NULL,
-  byte_size INTEGER NOT NULL,
-  is_tombstone INTEGER NOT NULL,
-  updated_at_ms REAL NOT NULL,
-  CONSTRAINT release_catalogs_strategy_target_check CHECK (
-    (strategy = 'APP_VERSION' AND fingerprint_hash IS NULL)
-    OR (strategy = 'FINGERPRINT' AND fingerprint_hash IS NOT NULL)
-  ),
-  CONSTRAINT release_catalogs_generation_check CHECK (
-    generation >= 1 AND generation <= 9007199254740991
-  ),
-  CONSTRAINT release_catalogs_byte_size_check CHECK (
-    byte_size >= 0 AND byte_size <= 262144
-  ),
-  CONSTRAINT release_catalogs_channel_id_fk FOREIGN KEY (channel_id)
-    REFERENCES channels(id) ON UPDATE RESTRICT ON DELETE RESTRICT
-);
-
-CREATE TABLE bundle_events (
-  id TEXT PRIMARY KEY NOT NULL,
-  type TEXT NOT NULL,
-  install_id TEXT NOT NULL,
-  user_id TEXT,
-  username TEXT,
-  from_release_id TEXT,
-  from_bundle_id TEXT,
-  to_release_id TEXT,
-  to_bundle_id TEXT NOT NULL,
-  platform TEXT NOT NULL,
-  app_version TEXT NOT NULL,
-  channel TEXT NOT NULL,
-  cohort TEXT NOT NULL,
-  update_strategy TEXT,
-  fingerprint_hash TEXT,
-  sdk_version TEXT,
-  received_at_ms REAL NOT NULL,
-  CONSTRAINT bundle_events_type_check CHECK (
-    type IN ('UPDATE_APPLIED', 'RECOVERED', 'RELEASE_ADOPTED', 'UNCHANGED')
-  ),
-  CONSTRAINT bundle_events_platform_check CHECK (
-    platform IN ('ios', 'android')
-  ),
-  CONSTRAINT bundle_events_shape_check CHECK (
-    (
-      type IN ('UPDATE_APPLIED', 'RECOVERED', 'RELEASE_ADOPTED')
-      AND from_bundle_id IS NOT NULL
-      AND update_strategy IS NOT NULL
-      AND update_strategy IN ('fingerprint', 'appVersion')
-    ) OR (
-      type = 'UNCHANGED'
-      AND from_bundle_id IS NULL
-      AND update_strategy IS NULL
-    )
-  ),
-  CONSTRAINT bundle_events_received_at_check CHECK (received_at_ms >= 0)
-);
-
-CREATE TABLE api_keys (
-  id TEXT PRIMARY KEY NOT NULL,
-  hash TEXT NOT NULL,
-  name TEXT NOT NULL,
-  prefix TEXT NOT NULL,
-  role TEXT NOT NULL,
-  created_at_ms REAL NOT NULL,
-  revoked_at_ms REAL,
-  CONSTRAINT api_keys_role_check CHECK (role = 'client'),
-  CONSTRAINT api_keys_created_at_check CHECK (created_at_ms >= 0),
-  CONSTRAINT api_keys_revoked_at_check CHECK (
-    revoked_at_ms IS NULL OR revoked_at_ms >= 0
-  )
-);
-
-CREATE TABLE private_hot_updater_settings (
-  key TEXT PRIMARY KEY NOT NULL,
-  value TEXT NOT NULL DEFAULT '1.0.0'
-);
-
-CREATE UNIQUE INDEX channels_name_key ON channels(name);
-CREATE INDEX bundle_patches_bundle_id_idx ON bundle_patches(bundle_id);
-CREATE INDEX bundle_patches_base_bundle_id_idx ON bundle_patches(base_bundle_id);
-CREATE INDEX releases_scope_order_idx ON releases(scope_key, id);
-CREATE INDEX releases_channel_platform_order_idx ON releases(channel_id, platform, id);
-CREATE INDEX releases_bundle_id_idx ON releases(bundle_id);
-CREATE INDEX releases_fingerprint_hash_idx ON releases(fingerprint_hash);
-CREATE INDEX releases_enabled_idx ON releases(enabled);
-CREATE INDEX release_catalogs_channel_idx ON release_catalogs(channel_id);
-CREATE INDEX bundle_events_received_at_idx ON bundle_events(received_at_ms, id);
-CREATE INDEX bundle_events_install_idx ON bundle_events(install_id, received_at_ms, id);
-CREATE INDEX bundle_events_user_id_idx ON bundle_events(user_id, received_at_ms, id);
-CREATE INDEX bundle_events_username_idx ON bundle_events(username, received_at_ms, id);
-CREATE INDEX bundle_events_to_bundle_idx ON bundle_events(type, to_bundle_id, received_at_ms, id);
-CREATE INDEX bundle_events_from_bundle_idx ON bundle_events(type, from_bundle_id, received_at_ms, id);
-CREATE INDEX bundle_events_to_release_idx ON bundle_events(type, to_release_id, received_at_ms, id);
-CREATE INDEX bundle_events_from_release_idx ON bundle_events(type, from_release_id, received_at_ms, id);
-CREATE UNIQUE INDEX api_keys_hash_key ON api_keys(hash);
-CREATE INDEX api_keys_created_at_idx ON api_keys(created_at_ms, id);
+-- HotUpdater.schema
+
+CREATE TABLE IF NOT EXISTS "_hu_write" ("id" TEXT NOT NULL, "failed_op" INTEGER, PRIMARY KEY ("id"));
+
+CREATE TABLE IF NOT EXISTS "bundles" ("id" TEXT NOT NULL, "platform" TEXT NOT NULL, "git_commit_hash" TEXT, "metadata" TEXT NOT NULL, "manifest_storage_uri" TEXT NOT NULL, "manifest_file_hash" TEXT NOT NULL, "asset_base_storage_uri" TEXT NOT NULL, "_refs_bundle_patches_bundle_id" INTEGER NOT NULL DEFAULT 0, "_refs_bundle_patches_base_bundle_id" INTEGER NOT NULL DEFAULT 0, "_refs_releases_bundle_id" INTEGER NOT NULL DEFAULT 0, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE INDEX IF NOT EXISTS "bundles_byPlatform" ON "bundles" ("platform", "id");
+
+CREATE TABLE IF NOT EXISTS "bundle_patches" ("id" TEXT NOT NULL, "bundle_id" TEXT NOT NULL, "base_bundle_id" TEXT NOT NULL, "base_file_hash" TEXT NOT NULL, "patch_file_hash" TEXT NOT NULL, "patch_storage_uri" TEXT NOT NULL, "byte_size" INTEGER NOT NULL, "order_index" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE UNIQUE INDEX IF NOT EXISTS "bundle_patches_pair" ON "bundle_patches" ("bundle_id", "base_bundle_id");
+
+CREATE INDEX IF NOT EXISTS "bundle_patches_byBundle" ON "bundle_patches" ("bundle_id", "order_index", "id");
+
+CREATE INDEX IF NOT EXISTS "bundle_patches_byBase" ON "bundle_patches" ("base_bundle_id", "bundle_id", "id");
+
+CREATE TABLE IF NOT EXISTS "releases" ("id" TEXT NOT NULL, "revision" INTEGER NOT NULL, "scope_key" TEXT NOT NULL, "channel_id" TEXT NOT NULL, "platform" TEXT NOT NULL, "kind" TEXT NOT NULL, "bundle_id" TEXT, "strategy" TEXT NOT NULL, "target_app_version" TEXT, "fingerprint_hash" TEXT, "enabled" INTEGER NOT NULL, "should_force_update" INTEGER NOT NULL, "message" TEXT, "rollout_cohort_count" INTEGER NOT NULL, "target_cohorts" TEXT NOT NULL, "operation" TEXT NOT NULL, "source_release_id" TEXT, "created_at_ms" INTEGER NOT NULL, "updated_at_ms" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE INDEX IF NOT EXISTS "releases_byScope" ON "releases" ("scope_key", "id");
+
+CREATE INDEX IF NOT EXISTS "releases_byScopeEnabled" ON "releases" ("scope_key", "enabled", "id");
+
+CREATE INDEX IF NOT EXISTS "releases_byChannelPlatform" ON "releases" ("channel_id", "platform", "id");
+
+CREATE INDEX IF NOT EXISTS "releases_byChannelPlatformEnabled" ON "releases" ("channel_id", "platform", "enabled", "id");
+
+CREATE INDEX IF NOT EXISTS "releases_byBundle" ON "releases" ("bundle_id", "id");
+
+CREATE TABLE IF NOT EXISTS "release_catalogs" ("scope_key" TEXT NOT NULL, "catalog_id" TEXT NOT NULL, "strategy" TEXT NOT NULL, "channel_id" TEXT NOT NULL, "channel_key" TEXT NOT NULL, "platform" TEXT NOT NULL, "fingerprint_hash" TEXT, "generation" INTEGER NOT NULL, "payload" TEXT NOT NULL, "catalog_hash" TEXT NOT NULL, "byte_size" INTEGER NOT NULL, "is_tombstone" INTEGER NOT NULL, "updated_at_ms" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("scope_key"));
+
+CREATE TABLE IF NOT EXISTS "channels" ("id" TEXT NOT NULL, "name" TEXT NOT NULL, "_refs_releases_channel_id" INTEGER NOT NULL DEFAULT 0, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE INDEX IF NOT EXISTS "channels_all" ON "channels" ("name", "id");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "channels_name" ON "channels" ("name");
+
+CREATE TABLE IF NOT EXISTS "bundle_totals" ("platform_key" TEXT NOT NULL, "_shard" INTEGER NOT NULL, "bundles" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("platform_key", "_shard"));
+
+CREATE TABLE IF NOT EXISTS "bundle_events" ("id" TEXT NOT NULL, "type" TEXT NOT NULL, "install_id" TEXT NOT NULL, "user_id" TEXT, "from_release_id" TEXT, "from_bundle_id" TEXT, "to_release_id" TEXT, "to_bundle_id" TEXT NOT NULL, "platform" TEXT NOT NULL, "app_version" TEXT NOT NULL, "channel" TEXT NOT NULL, "metadata" TEXT NOT NULL, "received_at_ms" INTEGER NOT NULL, "day" INTEGER, "movement_install_id" TEXT, "bundle_ref" TEXT, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE INDEX IF NOT EXISTS "bundle_events_recent" ON "bundle_events" ("channel", "platform", "day", "received_at_ms", "id");
+
+CREATE INDEX IF NOT EXISTS "bundle_events_movementsByInstall" ON "bundle_events" ("movement_install_id", "received_at_ms", "id");
+
+CREATE TABLE IF NOT EXISTS "bundle_events__byBundle" ("platform" TEXT NOT NULL, "channel" TEXT NOT NULL, "type" TEXT NOT NULL, "bundle_ref" TEXT NOT NULL, "day" INTEGER NOT NULL, "received_at_ms" INTEGER NOT NULL, "id" TEXT NOT NULL, PRIMARY KEY ("platform", "channel", "type", "bundle_ref", "day", "received_at_ms", "id"));
+
+CREATE INDEX IF NOT EXISTS "bundle_events_byDay" ON "bundle_events" ("day", "received_at_ms", "id");
+
+CREATE TABLE IF NOT EXISTS "bundle_event_heads" ("install_id" TEXT NOT NULL, "id" TEXT NOT NULL, "type" TEXT NOT NULL, "user_id" TEXT, "from_release_id" TEXT, "from_bundle_id" TEXT, "to_release_id" TEXT, "to_bundle_id" TEXT NOT NULL, "platform" TEXT NOT NULL, "app_version" TEXT NOT NULL, "channel" TEXT NOT NULL, "metadata" TEXT NOT NULL, "received_at_ms" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("install_id"));
+
+CREATE INDEX IF NOT EXISTS "bundle_event_heads_byUser" ON "bundle_event_heads" ("user_id", "install_id");
+
+CREATE INDEX IF NOT EXISTS "bundle_event_heads__retention" ON "bundle_event_heads" ("received_at_ms", "install_id");
+
+CREATE TABLE IF NOT EXISTS "insights_overview" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "downloads" INTEGER NOT NULL, "launches" INTEGER NOT NULL, "failed_launches" INTEGER NOT NULL, "failed_updates" INTEGER NOT NULL, "patch_downloads" INTEGER NOT NULL, "patch_fallbacks" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_overview__retention" ON "insights_overview" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_sketches" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "launch_users" TEXT, "activity_users" TEXT, "failed_users" TEXT, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_sketches__retention" ON "insights_sketches" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_overview_daily" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "downloads" INTEGER NOT NULL, "launches" INTEGER NOT NULL, "failed_launches" INTEGER NOT NULL, "failed_updates" INTEGER NOT NULL, "patch_downloads" INTEGER NOT NULL, "patch_fallbacks" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_overview_daily__retention" ON "insights_overview_daily" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_sketches_daily" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "launch_users" TEXT, "activity_users" TEXT, "failed_users" TEXT, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_sketches_daily__retention" ON "insights_sketches_daily" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_overview_lifetime" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "downloads" INTEGER NOT NULL, "launches" INTEGER NOT NULL, "failed_launches" INTEGER NOT NULL, "failed_updates" INTEGER NOT NULL, "patch_downloads" INTEGER NOT NULL, "patch_fallbacks" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE TABLE IF NOT EXISTS "insights_sketches_lifetime" ("identity" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "failed_users" TEXT, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE TABLE IF NOT EXISTS "insights_distribution" ("channel" TEXT NOT NULL, "platform" TEXT NOT NULL, "app_version" TEXT NOT NULL, "release_id" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "latest_installations" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("channel", "platform", "app_version", "release_id", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_distribution_byScope" ON "insights_distribution" ("channel", "platform", "bucket_start_ms", "app_version", "release_id", "_shard");
+
+CREATE INDEX IF NOT EXISTS "insights_distribution_byVersion" ON "insights_distribution" ("channel", "platform", "app_version", "bucket_start_ms", "release_id", "_shard");
+
+CREATE INDEX IF NOT EXISTS "insights_distribution__retention" ON "insights_distribution" ("bucket_start_ms", "channel", "platform", "app_version", "release_id", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_latest_by_bundle" ("platform" TEXT NOT NULL, "channel" TEXT NOT NULL, "bundle_field" TEXT NOT NULL, "bundle_id" TEXT NOT NULL, "type" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "installations" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "bundle_field", "bundle_id", "type", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_latest_by_bundle__retention" ON "insights_latest_by_bundle" ("bucket_start_ms", "platform", "channel", "bundle_field", "bundle_id", "type", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_outcomes" ("platform" TEXT NOT NULL, "channel" TEXT NOT NULL, "type" TEXT NOT NULL, "bundle_ref" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "_shard" INTEGER NOT NULL, "events" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "type", "bundle_ref", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_outcomes__retention" ON "insights_outcomes" ("bucket_start_ms", "platform", "channel", "type", "bundle_ref", "_shard");
+
+CREATE TABLE IF NOT EXISTS "insights_failures" ("platform" TEXT NOT NULL, "channel" TEXT NOT NULL, "bucket_start_ms" INTEGER NOT NULL, "release_id" TEXT NOT NULL, "stage" TEXT NOT NULL, "reason" TEXT NOT NULL, "detail" TEXT NOT NULL, "_shard" INTEGER NOT NULL, "events" INTEGER NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "bucket_start_ms", "release_id", "stage", "reason", "detail", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "insights_failures__retention" ON "insights_failures" ("bucket_start_ms", "platform", "channel", "release_id", "stage", "reason", "detail", "_shard");
+
+CREATE TABLE IF NOT EXISTS "api_keys" ("id" TEXT NOT NULL, "hash" TEXT NOT NULL, "name" TEXT NOT NULL, "prefix" TEXT NOT NULL, "role" TEXT NOT NULL, "created_at_ms" INTEGER NOT NULL, "revoked_at_ms" INTEGER, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
+
+CREATE INDEX IF NOT EXISTS "api_keys_byCreated" ON "api_keys" ("created_at_ms", "id");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "api_keys_hash" ON "api_keys" ("hash");
+
+CREATE TABLE IF NOT EXISTS "private_hot_updater_settings" ("key" TEXT NOT NULL, "value" TEXT NOT NULL, "_v" INTEGER NOT NULL DEFAULT 0, PRIMARY KEY ("key"));
+
+INSERT INTO "private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.engine', '1', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
+
+INSERT INTO "private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.core', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
+
+INSERT INTO "private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.insights', '1.2.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
+
+INSERT INTO "private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.apiKeys', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";

package/src/d1Database.ts

@@ -1,8 +1,23 @@
-import { createDatabasePlugin } from "@hot-updater/plugin-core";
-import { createDatabasePluginAdapter } from "@hot-updater/plugin-core/internal";
+import {
+  coreSettings,
+  coreTarget,
+  type SqlStatement,
+} from "@hot-updater/plugin-core";
+import type {
+  SchemaGenerator,
+  ToolingDatabase,
+} from "@hot-updater/plugin-core";
 import Cloudflare from "cloudflare";
 
-import { createD1Implementation, type D1Statement } from "./d1Implementation";
+import {
+  createD1Database,
+  D1ExecutionError,
+  type D1ResultLike,
+  toSqlResult,
+} from "./d1Executor";
+import { d1SchemaSql } from "./d1Schema";
+
+export { D1ExecutionError } from "./d1Executor";
 
 export interface D1DatabaseConfig {
   readonly databaseId: string;
@@ -10,56 +25,62 @@ export interface D1DatabaseConfig {
   readonly cloudflareApiToken: string;
 }
 
-export const d1Database = (config: D1DatabaseConfig) => {
+/** The REST API binds text: each value goes as JSON and is read back with `json_extract`. */
+const encode = ({ sql, params }: SqlStatement) => ({
+  // A function, since `$'` in a replacement string means "the rest of the input".
+  sql: sql.replaceAll("?", () => "json_extract(?, '$')"),
+  params: params.map((value) => JSON.stringify(value ?? null)),
+});
+
+/**
+ * Hot Updater's database on D1 through the Cloudflare REST API, for the CLI
+ * and console. `hot-updater db generate` writes a D1 migration of the built-in
+ * tables and the server's plugin tables to `migrations`, and
+ * `hot-updater db migrate` applies them through the API.
+ */
+export const d1Database = (config: D1DatabaseConfig): ToolingDatabase => {
   const cloudflare = new Cloudflare({
     apiToken: config.cloudflareApiToken,
   });
-
-  const execute = async (
-    statements: readonly D1Statement[],
-  ): Promise<readonly (readonly unknown[])[]> => {
-    const first = statements[0];
+  const execute = async (statements: readonly SqlStatement[]) => {
+    const [first] = statements;
     if (first === undefined) return [];
     const body =
       statements.length === 1
-        ? {
-            account_id: config.accountId,
-            sql: first.sql,
-            params: [...first.params],
-          }
-        : {
-            account_id: config.accountId,
-            batch: statements.map(({ sql, params }) => ({
-              sql,
-              params: [...params],
-            })),
-          };
+        ? { account_id: config.accountId, ...encode(first) }
+        : { account_id: config.accountId, batch: statements.map(encode) };
     // cloudflare@4 predates the D1 REST API's parameterized batch body type.
-    const page = await cloudflare.d1.database.query(config.databaseId, {
-      ...body,
-    } as unknown as Parameters<typeof cloudflare.d1.database.query>[1]);
-    const results: unknown[][] = [];
+    const page = await cloudflare.d1.database.query(
+      config.databaseId,
+      body as unknown as Parameters<typeof cloudflare.d1.database.query>[1],
+    );
+    const results = [];
     for await (const resultPage of page.iterPages()) {
       for (const result of resultPage.result) {
-        results.push(result.results ?? []);
+        results.push(toSqlResult(result as D1ResultLike));
       }
     }
+    if (results.length !== statements.length) throw new D1ExecutionError();
     return results;
   };
-
-  const adapter = createDatabasePluginAdapter(
-    "d1Database",
-    createD1Implementation({
-      async query(sql, params) {
-        return (await execute([{ sql, params }])).flat();
-      },
+  return {
+    ...createD1Database({
+      query: async (statement) => (await execute([statement]))[0]!,
       batch: execute,
     }),
-  );
-  return createDatabasePlugin({
-    name: "d1Database",
-    models: adapter.models,
-    commit: adapter.commit,
-    ...(adapter.dispose ? { dispose: adapter.dispose } : {}),
-  });
+    generateSchema: ((version, _name, target = coreTarget) => {
+      if (version !== "latest" && version !== coreSettings["schema.core"]) {
+        throw new Error(`Invalid version ${version}`);
+      }
+      // Wrangler applies migrations in the order of their leading numbers.
+      const timestamp = new Date()
+        .toISOString()
+        .replace(/\D/g, "")
+        .slice(0, 14);
+      return {
+        code: d1SchemaSql(target),
+        path: `migrations/${timestamp}_hot-updater.sql`,
+      };
+    }) satisfies SchemaGenerator,
+  };
 };

package/src/d1Executor.ts

@@ -0,0 +1,84 @@
+import {
+  createEngineDatabase,
+  createSqlAdapter,
+  type SqlExecutor,
+  type SqlResult,
+  type SqlStatement,
+} from "@hot-updater/plugin-core";
+import type { ToolingDatabase } from "@hot-updater/plugin-core";
+
+/** A D1 result, from the binding or the REST API. */
+export interface D1ResultLike {
+  readonly results?: readonly unknown[];
+  readonly success?: boolean;
+  readonly meta?: { readonly changes?: number };
+}
+
+export class D1ExecutionError extends Error {
+  readonly name = "D1ExecutionError";
+  constructor() {
+    super("D1 did not successfully execute every requested statement");
+  }
+}
+
+export const toSqlResult = (result: D1ResultLike): SqlResult => {
+  if (result.success === false) throw new D1ExecutionError();
+  return {
+    rows: (result.results ?? []) as Record<string, unknown>[],
+    changes: result.meta?.changes ?? 0,
+  };
+};
+
+/** D1 reports SQLite errors in the message; the SQL core classifies codes. */
+const withSqliteCode = (error: unknown): unknown => {
+  const message = error instanceof Error ? error.message : String(error);
+  const code = /UNIQUE constraint failed|constraint failed: .*PRIMARY/iu.test(
+    message,
+  )
+    ? "SQLITE_CONSTRAINT_UNIQUE"
+    : /SQLITE_BUSY|database is locked/iu.test(message)
+      ? "SQLITE_BUSY"
+      : undefined;
+  return code === undefined
+    ? error
+    : Object.assign(new Error(message, { cause: error }), { code });
+};
+
+/**
+ * The most ops one write sends. Each statement of a batch is one query, a
+ * Worker invocation allows 1,000 queries on the paid plan, and an op takes at
+ * most two statements besides the batch's three.
+ */
+export const D1_MAX_OPS = 450;
+
+/**
+ * Hot Updater's database on D1: the storage engine through the shared SQL
+ * core, fenced by the schema settings. D1 has no interactive transactions,
+ * so each write is one atomic batch that evaluates its guards first
+ * (`_hu_write`).
+ */
+export const createD1Database = (runner: {
+  query(statement: SqlStatement): Promise<SqlResult>;
+  batch(statements: readonly SqlStatement[]): Promise<readonly SqlResult[]>;
+}): ToolingDatabase => {
+  const executor: SqlExecutor = {
+    dialect: "sqlite",
+    execute: (statement) =>
+      runner.query(statement).catch((error: unknown) => {
+        throw withSqliteCode(error);
+      }),
+    batch: (statements) =>
+      runner.batch(statements).catch((error: unknown) => {
+        throw withSqliteCode(error);
+      }),
+    transaction: () => {
+      throw new Error(
+        "D1 has no interactive transactions; writes are batches.",
+      );
+    },
+  };
+  return createEngineDatabase({
+    name: "d1Database",
+    adapter: createSqlAdapter({ executor, maxOps: D1_MAX_OPS, maxParams: 100 }),
+  });
+};

package/src/d1Schema.ts

@@ -0,0 +1,26 @@
+import {
+  coreTarget,
+  createTableStatements,
+  WRITE_GUARD_TABLE,
+  generateEngineSql,
+  type ToolingTarget,
+} from "@hot-updater/plugin-core";
+
+/**
+ * D1's schema: the guard table batch writes need, then the shared SQL
+ * schema of core and the target's plugins, settings last. Every statement can
+ * run again, so a migration for a server's plugin tables repeats core's.
+ */
+export const d1SchemaStatements = ({
+  schema,
+  settings,
+}: ToolingTarget = coreTarget): string[] => [
+  ...createTableStatements("sqlite", [WRITE_GUARD_TABLE]),
+  ...generateEngineSql("sqlite", schema, settings),
+];
+
+/** The schema as a D1 migration, which `wrangler d1 migrations apply` runs. */
+export const d1SchemaSql = (target?: ToolingTarget): string =>
+  `-- HotUpdater.schema\n\n${d1SchemaStatements(target)
+    .map((statement) => `${statement};`)
+    .join("\n\n")}\n`;

package/src/index.ts

@@ -1,2 +1,3 @@
 export * from "./d1Database";
 export * from "./r2Storage";
+export { plugins } from "./plugins";

package/src/plugins.ts

@@ -0,0 +1,8 @@
+import { apiKeys } from "@hot-updater/server/plugins/api-keys";
+import { insights } from "@hot-updater/server/plugins/insights";
+
+/**
+ * The plugins the managed Cloudflare server runs: Insights, and API keys on every
+ * client route. Its Worker imports this list.
+ */
+export const plugins = [insights(), apiKeys()] as const;