@hot-updater/cloudflare 1.0.4 → 1.0.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/cloudflare",
   "type": "module",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -55,10 +55,10 @@
     "cloudflare": "4.2.0",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/protocol": "1.0.4",
-    "@hot-updater/plugin-core": "1.0.4",
-    "@hot-updater/server": "1.0.4",
-    "@hot-updater/cli-tools": "1.0.4"
+    "@hot-updater/protocol": "1.0.6",
+    "@hot-updater/cli-tools": "1.0.6",
+    "@hot-updater/plugin-core": "1.0.6",
+    "@hot-updater/server": "1.0.6"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "0.13.0",
@@ -74,7 +74,7 @@
     "vitest": "4.1.4",
     "wrangler": "^4.69.0",
     "xdg-app-paths": "^8.3.0",
-    "@hot-updater/test-utils": "1.0.4"
+    "@hot-updater/test-utils": "1.0.6"
   },
   "scripts": {
     "build": "tsdown && pnpm build:worker",

package/worker/dist/README.md

@@ -1 +1 @@
-This folder contains the built output assets for the worker "hot-updater" generated at 2026-10-14T05:14:27.689Z.
+This folder contains the built output assets for the worker "hot-updater" generated at 2026-10-14T16:15:36.859Z.

package/worker/dist/index.js

@@ -604,6 +604,8 @@ var NIL_UUID = "00000000-0000-0000-0000-000000000000";
 var UUID_V7_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var isUUIDv7 = /* @__PURE__ */ __name((value) => typeof value === "string" && UUID_V7_PATTERN.test(value), "isUUIDv7");
 var ARTIFACT_PROTOCOL_VERSION = 1;
+var ARTIFACT_FILES_PROTOCOL_VERSION = 2;
+var ARTIFACT_FILES_REQUEST_LIMIT = 100;
 
 // ../plugin-core/dist/databaseRows.mjs
 var releaseRowToRelease = /* @__PURE__ */ __name((row) => ({
@@ -4510,7 +4512,7 @@ var createSqlAdapter = /* @__PURE__ */ __name(({ executor, tablePrefix = "", max
 }, "createSqlAdapter");
 
 // ../../packages/server/dist/package.mjs
-var version = "1.0.4";
+var version = "1.0.6";
 
 // ../../packages/server/dist/version.mjs
 var HOT_UPDATER_SERVER_VERSION = version;
@@ -4808,6 +4810,90 @@ async function resolveManifestArtifacts({ currentBundle, resolveFileUrl, readSto
   };
 }
 __name(resolveManifestArtifacts, "resolveManifestArtifacts");
+async function loadTargetPlan({ currentBundle, readStorageText, targetBundle }) {
+  const manifestStorageUri = getManifestStorageUri(targetBundle);
+  const manifestFileHash = getManifestFileHash(targetBundle);
+  const assetBaseStorageUri = getAssetBaseStorageUri(targetBundle);
+  if (!manifestStorageUri || !manifestFileHash || !assetBaseStorageUri) return null;
+  const targetManifest = await fetchBundleManifest(manifestStorageUri, readStorageText);
+  if (!targetManifest) return null;
+  return {
+    manifestFileHash,
+    manifestStorageUri,
+    plan: createManifestArtifactPlan({
+      assetBaseStorageUri,
+      currentBundle,
+      targetBundle,
+      targetManifest
+    }),
+    targetManifest
+  };
+}
+__name(loadTargetPlan, "loadTargetPlan");
+async function resolveManifestArtifactsV2({ currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
+  const target = await loadTargetPlan({
+    currentBundle,
+    readStorageText,
+    targetBundle
+  });
+  if (!target) return null;
+  const manifestUrl = await resolveFileUrl(target.manifestStorageUri);
+  if (!manifestUrl) return null;
+  const patched = target.plan.assets.find((asset) => asset.patch !== null);
+  let patch;
+  if (patched?.patch && !(patched.file.byteSize !== null && patched.patch.byteSize !== null && patched.patch.byteSize >= patched.file.byteSize)) try {
+    const patchUrl = await resolveFileUrl(patched.patch.storageUri);
+    if (patchUrl) patch = {
+      algorithm: "bsdiff",
+      assetPath: patched.assetPath,
+      baseBundleId: patched.patch.baseBundleId,
+      baseFileHash: patched.patch.baseFileHash,
+      patchFileHash: patched.patch.patchFileHash,
+      patchUrl,
+      ...patched.patch.byteSize === null ? {} : { byteSize: patched.patch.byteSize }
+    };
+  } catch {
+  }
+  let archiveUrl = null;
+  const archive = target.targetManifest.archive;
+  if (archive && isContentAddressedAssetFileHash(archive.downloadFileHash) && (asByteSize(archive.downloadByteSize) ?? 0) > 0 && (asByteSize(archive.tarByteSize) ?? 0) > 0) try {
+    archiveUrl = await resolveFileUrl(getBundleArchiveStorageUri({
+      manifestStorageUri: target.manifestStorageUri,
+      bundleId: targetBundle.id
+    }));
+  } catch {
+  }
+  return {
+    artifactProtocolVersion: ARTIFACT_FILES_PROTOCOL_VERSION,
+    manifestFileHash: target.manifestFileHash,
+    manifestUrl,
+    ...archiveUrl ? { archiveUrl } : {},
+    ...patch ? { patch } : {}
+  };
+}
+__name(resolveManifestArtifactsV2, "resolveManifestArtifactsV2");
+async function resolveManifestArtifactFiles({ paths, resolveFileUrl, readStorageText, targetBundle }) {
+  if (paths.length === 0 || paths.length > ARTIFACT_FILES_REQUEST_LIMIT || new Set(paths).size !== paths.length) return null;
+  const target = await loadTargetPlan({
+    currentBundle: null,
+    readStorageText,
+    targetBundle
+  });
+  if (!target) return null;
+  const planned = new Map(target.plan.assets.map((asset) => [asset.assetPath, asset]));
+  const requested = paths.map((path) => planned.get(path));
+  if (requested.some((asset) => asset === void 0)) return null;
+  const files = await Promise.all(requested.map(async (asset) => {
+    const url = await resolveFileUrl(asset.file.storageUri);
+    if (!url) return null;
+    const file = { url };
+    if (asset.file.compression) file.compression = asset.file.compression;
+    return [asset.assetPath, file];
+  }));
+  if (files.some((file) => file === null)) return null;
+  return { files: Object.fromEntries(files.filter((file) => file !== null)) };
+}
+__name(resolveManifestArtifactFiles, "resolveManifestArtifactFiles");
 
 // ../../node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/comparison-DenM3wCn.js
 var LETTER_DASH_NUMBER3 = "[a-zA-Z0-9-]";
@@ -5309,20 +5395,34 @@ var createCoreReads = /* @__PURE__ */ __name((db, storage) => {
       return projectReleaseCatalogRow(row === null ? null : toCatalogRow(row), input, scopeKey);
     },
     /** Artifact resolution: one batch read of both bundles and one unique read of their patch. */
-    async getArtifactInfo(targetBundleId, currentBundleId, artifactProtocolVersion) {
+    getArtifactInfo: /* @__PURE__ */ __name((async (targetBundleId, currentBundleId, artifactProtocolVersion) => {
       const { readStorageText } = storage;
-      if (artifactProtocolVersion !== ARTIFACT_PROTOCOL_VERSION || readStorageText === void 0) return null;
+      if (artifactProtocolVersion !== ARTIFACT_PROTOCOL_VERSION && artifactProtocolVersion !== ARTIFACT_FILES_PROTOCOL_VERSION || readStorageText === void 0) return null;
       const withCurrent = currentBundleId !== NIL_UUID;
       const [[target, current], patch] = await Promise.all([db.findByKeys("bundles", withCurrent ? [{ id: targetBundleId }, { id: currentBundleId }] : [{ id: targetBundleId }]), withCurrent ? db.findOne("bundle_patches", {
         bundle_id: targetBundleId,
         base_bundle_id: currentBundleId
       }) : null]);
       if (target === null || target === void 0) return null;
-      return resolveManifestArtifacts({
+      const input = {
         currentBundle: current ? rowToBundle(toBundleRow(current)) : null,
         readStorageText,
         resolveFileUrl: storage.resolveFileUrl,
         targetBundle: rowToBundle(toBundleRow(target), patch === null ? [] : [toPatchRow(patch)])
+      };
+      return artifactProtocolVersion === ARTIFACT_FILES_PROTOCOL_VERSION ? resolveManifestArtifactsV2(input) : resolveManifestArtifacts(input);
+    }), "getArtifactInfo"),
+    /** A Bundle's file URLs: one point read of the bundle and its manifest. */
+    async getArtifactFiles(bundleId, paths) {
+      const { readStorageText } = storage;
+      if (readStorageText === void 0) return null;
+      const row = await db.findOne("bundles", { id: bundleId });
+      if (row === null) return null;
+      return resolveManifestArtifactFiles({
+        paths,
+        readStorageText,
+        resolveFileUrl: storage.resolveFileUrl,
+        targetBundle: rowToBundle(toBundleRow(row))
       });
     },
     /** A bundle, its patches, and how many patches start from it. */
@@ -6619,11 +6719,23 @@ var ADMIN_ROUTES = [
 // ../../packages/server/dist/handlerReleaseCatalogRoutes.mjs
 var CATALOG_CONTENT_TYPE = "application/vnd.hot-updater.release-catalog+json; version=1";
 var ARTIFACT_CONTENT_TYPE = "application/vnd.hot-updater.artifact+json; version=1";
+var ARTIFACT_V2_CONTENT_TYPE = "application/vnd.hot-updater.artifact+json; version=2";
 var ORIGIN_CACHE_TTL_MS = 5e3;
 var ORIGIN_CACHE_MAX_ENTRIES = 128;
 var NO_CATALOG_HEADER = "x-hot-updater-catalog";
 var CATALOG_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
 var CATALOG_CDN_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=5, stale-if-error=0";
+var readArtifactFilePaths = /* @__PURE__ */ __name(async (request) => {
+  let body2;
+  try {
+    body2 = await request.json();
+  } catch {
+    return null;
+  }
+  const paths = body2?.paths;
+  if (!Array.isArray(paths) || paths.length === 0 || paths.length > ARTIFACT_FILES_REQUEST_LIMIT || !paths.every((path) => typeof path === "string" && path.length > 0) || new Set(paths).size !== paths.length) return null;
+  return paths;
+}, "readArtifactFilePaths");
 var privateNotFound = /* @__PURE__ */ __name(() => Response.json({ error: "Not found" }, {
   status: 404,
   headers: { "cache-control": "private, no-store" }
@@ -6733,6 +6845,30 @@ var createReleaseCatalogRouteHandlers = /* @__PURE__ */ __name(() => {
       if (invalid) return invalid;
       return catalogResponse(await loadCatalog(`fingerprint:${JSON.stringify(input)}`, () => core.getReleaseCatalog(input)), request);
     }, "fingerprintReleaseCatalog"),
+    artifactV2: /* @__PURE__ */ __name(async (params, _request, { core }) => {
+      const info = await core.getArtifactInfo(requireRouteParam(params, "targetBundleId"), requireRouteParam(params, "currentBundleId"), 2);
+      if (info === null) return privateNotFound();
+      return new Response(JSON.stringify(info), {
+        status: 200,
+        headers: {
+          "cache-control": "private, no-store",
+          "content-type": ARTIFACT_V2_CONTENT_TYPE
+        }
+      });
+    }, "artifactV2"),
+    artifactFilesV2: /* @__PURE__ */ __name(async (params, request, { core }) => {
+      const paths = await readArtifactFilePaths(request);
+      if (paths === null) return badRequest(`paths must be 1 to ${ARTIFACT_FILES_REQUEST_LIMIT} unique strings`);
+      const files = await core.getArtifactFiles(requireRouteParam(params, "targetBundleId"), paths);
+      if (files === null) return privateNotFound();
+      return new Response(JSON.stringify(files), {
+        status: 200,
+        headers: {
+          "cache-control": "private, no-store",
+          "content-type": ARTIFACT_V2_CONTENT_TYPE
+        }
+      });
+    }, "artifactFilesV2"),
     artifactV1: /* @__PURE__ */ __name(async (params, _request, { core }) => {
       const info = await core.getArtifactInfo(requireRouteParam(params, "targetBundleId"), requireRouteParam(params, "currentBundleId"), 1);
       if (info === null) return privateNotFound();
@@ -6886,6 +7022,8 @@ function createHotUpdaterHandlers({ api, clientPolicy, endpoints = [], plugins =
   addClientRoute("GET", "/release-catalogs/app-version/:platform/:channelKey/:appVersion", "appVersionReleaseCatalog");
   addClientRoute("GET", "/release-catalogs/fingerprint/:platform/:channelKey/:fingerprintHash", "fingerprintReleaseCatalog");
   addClientRoute("GET", "/artifacts/v1/:targetBundleId/from/:currentBundleId", "artifactV1");
+  addClientRoute("GET", "/artifacts/v2/:targetBundleId/from/:currentBundleId", "artifactV2");
+  addClientRoute("POST", "/artifacts/v2/:targetBundleId/files", "artifactFilesV2");
   const adminRouter = createRouter();
   const addAdminRoute = mount(adminRouter, true);
   addAdminRoute("GET", "/version", "adminVersion");