@hot-updater/server 0.30.12 → 0.31.1

package/dist/_virtual/_rolldown/runtime.cjs

@@ -0,0 +1,25 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+exports.__commonJSMin = __commonJSMin;
+exports.__toESM = __toESM;

package/dist/_virtual/_rolldown/runtime.mjs

@@ -0,0 +1,6 @@
+import { createRequire } from "node:module";
+//#region \0rolldown/runtime.js
+var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
+export { __commonJSMin, __require };

package/dist/adapters/drizzle.cjs

@@ -1,9 +1,6 @@
-var fumadb_adapters_drizzle = require("fumadb/adapters/drizzle");
-Object.keys(fumadb_adapters_drizzle).forEach(function(k) {
-	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function() {
-			return fumadb_adapters_drizzle[k];
-		}
-	});
-});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_index = require("../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/drizzle/index.cjs");
+//#region src/adapters/drizzle.ts
+const drizzleAdapter = (config) => Object.assign(require_index.drizzleAdapter(config), { provider: config.provider });
+//#endregion
+exports.drizzleAdapter = drizzleAdapter;

package/dist/adapters/drizzle.d.cts

@@ -1 +1,8 @@
-export * from "fumadb/adapters/drizzle";
+import { drizzleAdapter as drizzleAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/drizzle/index.cjs";
+import { ORMDatabaseAdapter } from "../db/types.cjs";
+
+//#region src/adapters/drizzle.d.ts
+type DrizzleConfig = Parameters<typeof drizzleAdapter$1>[0];
+declare const drizzleAdapter: (config: DrizzleConfig) => ORMDatabaseAdapter;
+//#endregion
+export { DrizzleConfig, drizzleAdapter };

package/dist/adapters/drizzle.d.mts

@@ -1 +1,8 @@
-export * from "fumadb/adapters/drizzle";
+import { drizzleAdapter as drizzleAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/drizzle/index.mjs";
+import { ORMDatabaseAdapter } from "../db/types.mjs";
+
+//#region src/adapters/drizzle.d.ts
+type DrizzleConfig = Parameters<typeof drizzleAdapter$1>[0];
+declare const drizzleAdapter: (config: DrizzleConfig) => ORMDatabaseAdapter;
+//#endregion
+export { DrizzleConfig, drizzleAdapter };

package/dist/adapters/drizzle.mjs

@@ -1,2 +1,5 @@
-export * from "fumadb/adapters/drizzle";
-export {};
+import { drizzleAdapter as drizzleAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/drizzle/index.mjs";
+//#region src/adapters/drizzle.ts
+const drizzleAdapter = (config) => Object.assign(drizzleAdapter$1(config), { provider: config.provider });
+//#endregion
+export { drizzleAdapter };

package/dist/adapters/kysely.cjs

@@ -1,9 +1,7 @@
-var fumadb_adapters_kysely = require("fumadb/adapters/kysely");
-Object.keys(fumadb_adapters_kysely).forEach(function(k) {
-	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function() {
-			return fumadb_adapters_kysely[k];
-		}
-	});
-});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_chunk_LVCPMTAT = require("../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/chunk-LVCPMTAT.cjs");
+require("../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/kysely/index.cjs");
+//#region src/adapters/kysely.ts
+const kyselyAdapter = (config) => Object.assign(require_chunk_LVCPMTAT.kyselyAdapter(config), { provider: config.provider });
+//#endregion
+exports.kyselyAdapter = kyselyAdapter;

package/dist/adapters/kysely.d.cts

@@ -1 +1,14 @@
-export * from "fumadb/adapters/kysely";
+import { RelationMode as RelationMode$1, SQLProvider as SQLProvider$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/index-CMqePMTF.cjs";
+import { ORMDatabaseAdapter } from "../db/types.cjs";
+
+//#region src/adapters/kysely.d.ts
+type RelationMode = RelationMode$1;
+type SQLProvider = SQLProvider$1;
+interface KyselyConfig<TDatabase extends object = object> {
+  db: TDatabase;
+  provider: SQLProvider;
+  relationMode?: RelationMode;
+}
+declare const kyselyAdapter: <TDatabase extends object>(config: KyselyConfig<TDatabase>) => ORMDatabaseAdapter;
+//#endregion
+export { KyselyConfig, RelationMode, SQLProvider, kyselyAdapter };

package/dist/adapters/kysely.d.mts

@@ -1 +1,14 @@
-export * from "fumadb/adapters/kysely";
+import { RelationMode as RelationMode$1, SQLProvider as SQLProvider$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/index-CMqePMTF.mjs";
+import { ORMDatabaseAdapter } from "../db/types.mjs";
+
+//#region src/adapters/kysely.d.ts
+type RelationMode = RelationMode$1;
+type SQLProvider = SQLProvider$1;
+interface KyselyConfig<TDatabase extends object = object> {
+  db: TDatabase;
+  provider: SQLProvider;
+  relationMode?: RelationMode;
+}
+declare const kyselyAdapter: <TDatabase extends object>(config: KyselyConfig<TDatabase>) => ORMDatabaseAdapter;
+//#endregion
+export { KyselyConfig, RelationMode, SQLProvider, kyselyAdapter };

package/dist/adapters/kysely.mjs

@@ -1,2 +1,6 @@
-export * from "fumadb/adapters/kysely";
-export {};
+import { kyselyAdapter as kyselyAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/chunk-LVCPMTAT.mjs";
+import "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/kysely/index.mjs";
+//#region src/adapters/kysely.ts
+const kyselyAdapter = (config) => Object.assign(kyselyAdapter$1(config), { provider: config.provider });
+//#endregion
+export { kyselyAdapter };

package/dist/adapters/mongodb.cjs

@@ -1,9 +1,7 @@
-var fumadb_adapters_mongodb = require("fumadb/adapters/mongodb");
-Object.keys(fumadb_adapters_mongodb).forEach(function(k) {
-	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function() {
-			return fumadb_adapters_mongodb[k];
-		}
-	});
-});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../_virtual/_rolldown/runtime.cjs");
+let fumadb_adapters_mongodb = require("fumadb/adapters/mongodb");
+//#region src/adapters/mongodb.ts
+const mongoAdapter = (options) => Object.assign((0, fumadb_adapters_mongodb.mongoAdapter)(options), { provider: "mongodb" });
+//#endregion
+exports.mongoAdapter = mongoAdapter;

package/dist/adapters/mongodb.d.cts

@@ -1 +1,9 @@
-export * from "fumadb/adapters/mongodb";
+import { ORMDatabaseAdapter } from "../db/types.cjs";
+
+//#region src/adapters/mongodb.d.ts
+interface MongoDBConfig<TClient extends object = object> {
+  client: TClient;
+}
+declare const mongoAdapter: <TClient extends object>(options: MongoDBConfig<TClient>) => ORMDatabaseAdapter;
+//#endregion
+export { MongoDBConfig, mongoAdapter };

package/dist/adapters/mongodb.d.mts

@@ -1 +1,9 @@
-export * from "fumadb/adapters/mongodb";
+import { ORMDatabaseAdapter } from "../db/types.mjs";
+
+//#region src/adapters/mongodb.d.ts
+interface MongoDBConfig<TClient extends object = object> {
+  client: TClient;
+}
+declare const mongoAdapter: <TClient extends object>(options: MongoDBConfig<TClient>) => ORMDatabaseAdapter;
+//#endregion
+export { MongoDBConfig, mongoAdapter };

package/dist/adapters/mongodb.mjs

@@ -1,2 +1,5 @@
-export * from "fumadb/adapters/mongodb";
-export {};
+import { mongoAdapter as mongoAdapter$1 } from "fumadb/adapters/mongodb";
+//#region src/adapters/mongodb.ts
+const mongoAdapter = (options) => Object.assign(mongoAdapter$1(options), { provider: "mongodb" });
+//#endregion
+export { mongoAdapter };

package/dist/adapters/prisma.cjs

@@ -1,9 +1,6 @@
-var fumadb_adapters_prisma = require("fumadb/adapters/prisma");
-Object.keys(fumadb_adapters_prisma).forEach(function(k) {
-	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function() {
-			return fumadb_adapters_prisma[k];
-		}
-	});
-});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_index = require("../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/prisma/index.cjs");
+//#region src/adapters/prisma.ts
+const prismaAdapter = (config) => Object.assign(require_index.prismaAdapter(config), { provider: config.provider });
+//#endregion
+exports.prismaAdapter = prismaAdapter;

package/dist/adapters/prisma.d.cts

@@ -1 +1,8 @@
-export * from "fumadb/adapters/prisma";
+import { ORMDatabaseAdapter } from "../db/types.cjs";
+import { prismaAdapter as prismaAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/prisma/index.cjs";
+
+//#region src/adapters/prisma.d.ts
+type PrismaConfig = Parameters<typeof prismaAdapter$1>[0];
+declare const prismaAdapter: (config: PrismaConfig) => ORMDatabaseAdapter;
+//#endregion
+export { PrismaConfig, prismaAdapter };

package/dist/adapters/prisma.d.mts

@@ -1 +1,8 @@
-export * from "fumadb/adapters/prisma";
+import { ORMDatabaseAdapter } from "../db/types.mjs";
+import { prismaAdapter as prismaAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/prisma/index.mjs";
+
+//#region src/adapters/prisma.d.ts
+type PrismaConfig = Parameters<typeof prismaAdapter$1>[0];
+declare const prismaAdapter: (config: PrismaConfig) => ORMDatabaseAdapter;
+//#endregion
+export { PrismaConfig, prismaAdapter };

package/dist/adapters/prisma.mjs

@@ -1,2 +1,5 @@
-export * from "fumadb/adapters/prisma";
-export {};
+import { prismaAdapter as prismaAdapter$1 } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/adapters/prisma/index.mjs";
+//#region src/adapters/prisma.ts
+const prismaAdapter = (config) => Object.assign(prismaAdapter$1(config), { provider: config.provider });
+//#endregion
+export { prismaAdapter };

package/dist/db/createBundleDiff.cjs

@@ -0,0 +1,166 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
+let node_crypto = require("node:crypto");
+node_crypto = require_runtime.__toESM(node_crypto);
+let node_fs_promises = require("node:fs/promises");
+node_fs_promises = require_runtime.__toESM(node_fs_promises);
+let node_os = require("node:os");
+node_os = require_runtime.__toESM(node_os);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+let node_util = require("node:util");
+let node_zlib = require("node:zlib");
+let _hot_updater_bsdiff = require("@hot-updater/bsdiff");
+let _hot_updater_core = require("@hot-updater/core");
+//#region src/db/createBundleDiff.ts
+const HBC_ASSET_PATH_RE = /\.bundle$/;
+const BR_COMPRESSED_ASSET_PATH_RE = /(^|\/)index\.[^/]+\.bundle$/;
+const HOT_UPDATER_DOWNLOAD_DIR_PREFIX = "downloads-";
+const decompressBrotli = (0, node_util.promisify)(node_zlib.brotliDecompress);
+const isBundleManifest = (value) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const manifest = value;
+	if (typeof manifest.bundleId !== "string") return false;
+	if (!manifest.assets || typeof manifest.assets !== "object") return false;
+	return Object.values(manifest.assets).every((asset) => {
+		if (!asset || typeof asset !== "object" || Array.isArray(asset)) return false;
+		const manifestAsset = asset;
+		return typeof manifestAsset.fileHash === "string" && (manifestAsset.signature === void 0 || typeof manifestAsset.signature === "string");
+	});
+};
+const createChildStorageUri = (baseStorageUri, relativePath) => {
+	const baseUrl = new URL(baseStorageUri);
+	baseUrl.pathname = `${baseUrl.pathname.replace(/\/+$/, "")}/${relativePath.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
+	return baseUrl.toString();
+};
+const getRelativeStorageDir = (relativePath) => {
+	const normalized = relativePath.replace(/\\/g, "/");
+	const dirname = node_path.default.posix.dirname(normalized);
+	return dirname === "." ? "" : dirname;
+};
+async function downloadFromUrl(url) {
+	const response = await fetch(url);
+	if (!response.ok) throw new Error(`Failed to download storage object: ${response.status}`);
+	return new Uint8Array(await response.arrayBuffer());
+}
+async function downloadStorageBytes(storageUri, storagePlugin) {
+	const protocol = new URL(storageUri).protocol.replace(":", "");
+	if (protocol === "http" || protocol === "https") return downloadFromUrl(storageUri);
+	if (!storagePlugin) throw new Error("Storage plugin is not configured");
+	if (storagePlugin.supportedProtocol !== protocol) throw new Error(`No storage plugin for protocol: ${protocol}`);
+	const downloadRoot = node_path.default.join(process.cwd(), ".hot-updater");
+	await node_fs_promises.default.mkdir(downloadRoot, { recursive: true });
+	const workDir = await node_fs_promises.default.mkdtemp(node_path.default.join(downloadRoot, HOT_UPDATER_DOWNLOAD_DIR_PREFIX));
+	const filename = node_path.default.basename(new URL(storageUri).pathname) || (0, node_crypto.randomUUID)();
+	const filePath = node_path.default.join(workDir, filename);
+	try {
+		await storagePlugin.profiles.node.downloadFile(storageUri, filePath);
+		return new Uint8Array(await node_fs_promises.default.readFile(filePath));
+	} finally {
+		await node_fs_promises.default.rm(workDir, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+async function fetchManifest(bundle, storagePlugin) {
+	const manifestStorageUri = (0, _hot_updater_core.getManifestStorageUri)(bundle);
+	if (!manifestStorageUri) throw new Error(`Bundle ${bundle.id} does not have manifest metadata`);
+	const manifestBytes = await downloadStorageBytes(manifestStorageUri, storagePlugin);
+	const payload = JSON.parse(new TextDecoder().decode(manifestBytes));
+	if (!isBundleManifest(payload)) throw new Error(`Invalid manifest payload for bundle ${bundle.id}`);
+	return payload;
+}
+function resolveHbcAssetPath(manifest) {
+	const candidates = Object.keys(manifest.assets).sort((left, right) => left.localeCompare(right)).filter((candidate) => HBC_ASSET_PATH_RE.test(candidate));
+	if (candidates.length === 0) throw new Error("No Hermes bundle asset found in manifest");
+	if (candidates.length > 1) throw new Error(`Expected exactly one Hermes bundle asset in manifest, found ${candidates.length}: ${candidates.join(", ")}`);
+	return candidates[0];
+}
+async function fetchAssetBytes(bundle, assetPath, storagePlugin) {
+	const assetBaseStorageUri = (0, _hot_updater_core.getAssetBaseStorageUri)(bundle);
+	if (!assetBaseStorageUri) throw new Error(`Bundle ${bundle.id} does not have asset storage metadata`);
+	if (BR_COMPRESSED_ASSET_PATH_RE.test(assetPath)) {
+		const compressedAssetStorageUri = createChildStorageUri(assetBaseStorageUri, `${assetPath}.br`);
+		let compressedBytes = null;
+		try {
+			compressedBytes = await downloadStorageBytes(compressedAssetStorageUri, storagePlugin);
+		} catch {}
+		if (compressedBytes) return new Uint8Array(await decompressBrotli(compressedBytes));
+	}
+	return downloadStorageBytes(createChildStorageUri(assetBaseStorageUri, assetPath), storagePlugin);
+}
+async function getFileHash(filePath) {
+	const file = await node_fs_promises.default.readFile(filePath);
+	return node_crypto.default.createHash("sha256").update(file).digest("hex");
+}
+function buildNextPatchState({ currentBundle, nextPatch, makePrimary }) {
+	const existingPatches = (0, _hot_updater_core.getBundlePatches)(currentBundle).filter((patch) => patch.baseBundleId !== nextPatch.baseBundleId);
+	const orderedPatches = makePrimary ? [nextPatch, ...existingPatches] : [...existingPatches, nextPatch];
+	return {
+		patches: orderedPatches,
+		primaryPatch: orderedPatches[0] ?? nextPatch
+	};
+}
+async function createBundleDiff({ baseBundleId, bundleId }, deps, options = {}) {
+	if (!deps.storagePlugin) throw new Error("Storage plugin is not configured");
+	if (baseBundleId === bundleId) throw new Error("Base bundle must be different from the target bundle");
+	const baseBundle = await deps.databasePlugin.getBundleById(baseBundleId);
+	const targetBundle = await deps.databasePlugin.getBundleById(bundleId);
+	if (!baseBundle || !targetBundle) throw new Error("Bundle not found");
+	if (baseBundle.platform !== targetBundle.platform) throw new Error("Base bundle platform must match the target bundle");
+	if (baseBundle.id.localeCompare(targetBundle.id) >= 0) throw new Error("Base bundle must be older than the target bundle");
+	const [baseManifest, targetManifest] = await Promise.all([fetchManifest(baseBundle, deps.storagePlugin), fetchManifest(targetBundle, deps.storagePlugin)]);
+	const baseAssetPath = resolveHbcAssetPath(baseManifest);
+	const targetAssetPath = resolveHbcAssetPath(targetManifest);
+	if (baseAssetPath !== targetAssetPath) throw new Error("Base and target Hermes asset paths do not match");
+	const baseAssetHash = baseManifest.assets[baseAssetPath]?.fileHash;
+	const targetAssetHash = targetManifest.assets[targetAssetPath]?.fileHash;
+	if (!baseAssetHash || !targetAssetHash) throw new Error("Hermes asset hash is missing from manifest");
+	if (baseAssetHash === targetAssetHash) throw new Error("Hermes bundle is unchanged; no diff patch is required");
+	const [baseBytes, targetBytes] = await Promise.all([fetchAssetBytes(baseBundle, baseAssetPath, deps.storagePlugin), fetchAssetBytes(targetBundle, targetAssetPath, deps.storagePlugin)]);
+	const patchBytes = await (0, _hot_updater_bsdiff.hdiff)(baseBytes, targetBytes);
+	const workDir = await node_fs_promises.default.mkdtemp(node_path.default.join(node_os.default.tmpdir(), "hot-updater-console-bsdiff-"));
+	const patchFilename = `${node_path.default.posix.basename(targetAssetPath)}.bsdiff`;
+	const patchPath = node_path.default.join(workDir, patchFilename);
+	const previousPatch = (0, _hot_updater_core.getBundlePatch)(targetBundle, baseBundle.id);
+	try {
+		await node_fs_promises.default.writeFile(patchPath, patchBytes);
+		const uploadKey = [
+			targetBundle.id,
+			"patches",
+			baseBundle.id,
+			getRelativeStorageDir(targetAssetPath)
+		].filter(Boolean).join("/");
+		const patchUpload = await deps.storagePlugin.profiles.node.upload(uploadKey, patchPath);
+		const patchFileHash = await getFileHash(patchPath);
+		const nextState = buildNextPatchState({
+			currentBundle: targetBundle,
+			nextPatch: {
+				baseBundleId: baseBundle.id,
+				baseFileHash: baseAssetHash,
+				patchFileHash,
+				patchStorageUri: patchUpload.storageUri
+			},
+			makePrimary: options.makePrimary ?? true
+		});
+		await deps.databasePlugin.updateBundle(targetBundle.id, {
+			patches: nextState.patches,
+			patchBaseBundleId: nextState.primaryPatch.baseBundleId,
+			patchBaseFileHash: nextState.primaryPatch.baseFileHash,
+			patchFileHash: nextState.primaryPatch.patchFileHash,
+			patchStorageUri: nextState.primaryPatch.patchStorageUri
+		});
+		await deps.databasePlugin.commitBundle();
+		if (previousPatch?.patchStorageUri && previousPatch.patchStorageUri !== patchUpload.storageUri) await deps.storagePlugin.profiles.node.delete(previousPatch.patchStorageUri).catch(() => {});
+		const updatedBundle = await deps.databasePlugin.getBundleById(targetBundle.id);
+		if (!updatedBundle) throw new Error("Updated bundle not found");
+		return updatedBundle;
+	} finally {
+		await node_fs_promises.default.rm(workDir, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+//#endregion
+exports.createBundleDiff = createBundleDiff;

package/dist/db/createBundleDiff.d.cts

@@ -0,0 +1,20 @@
+import { Bundle, DatabasePlugin, NodeStoragePlugin } from "@hot-updater/plugin-core";
+
+//#region src/db/createBundleDiff.d.ts
+interface CreateBundleDiffInput {
+  baseBundleId: string;
+  bundleId: string;
+}
+interface CreateBundleDiffDependencies {
+  databasePlugin: DatabasePlugin;
+  storagePlugin: NodeStoragePlugin | null;
+}
+interface CreateBundleDiffOptions {
+  makePrimary?: boolean;
+}
+declare function createBundleDiff({
+  baseBundleId,
+  bundleId
+}: CreateBundleDiffInput, deps: CreateBundleDiffDependencies, options?: CreateBundleDiffOptions): Promise<Bundle>;
+//#endregion
+export { CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, createBundleDiff };

package/dist/db/createBundleDiff.d.mts

@@ -0,0 +1,20 @@
+import { Bundle, DatabasePlugin, NodeStoragePlugin } from "@hot-updater/plugin-core";
+
+//#region src/db/createBundleDiff.d.ts
+interface CreateBundleDiffInput {
+  baseBundleId: string;
+  bundleId: string;
+}
+interface CreateBundleDiffDependencies {
+  databasePlugin: DatabasePlugin;
+  storagePlugin: NodeStoragePlugin | null;
+}
+interface CreateBundleDiffOptions {
+  makePrimary?: boolean;
+}
+declare function createBundleDiff({
+  baseBundleId,
+  bundleId
+}: CreateBundleDiffInput, deps: CreateBundleDiffDependencies, options?: CreateBundleDiffOptions): Promise<Bundle>;
+//#endregion
+export { CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, createBundleDiff };

package/dist/db/createBundleDiff.mjs

@@ -0,0 +1,161 @@
+import crypto, { randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+import { brotliDecompress } from "node:zlib";
+import { hdiff } from "@hot-updater/bsdiff";
+import { getAssetBaseStorageUri, getBundlePatch, getBundlePatches, getManifestStorageUri } from "@hot-updater/core";
+//#region src/db/createBundleDiff.ts
+const HBC_ASSET_PATH_RE = /\.bundle$/;
+const BR_COMPRESSED_ASSET_PATH_RE = /(^|\/)index\.[^/]+\.bundle$/;
+const HOT_UPDATER_DOWNLOAD_DIR_PREFIX = "downloads-";
+const decompressBrotli = promisify(brotliDecompress);
+const isBundleManifest = (value) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const manifest = value;
+	if (typeof manifest.bundleId !== "string") return false;
+	if (!manifest.assets || typeof manifest.assets !== "object") return false;
+	return Object.values(manifest.assets).every((asset) => {
+		if (!asset || typeof asset !== "object" || Array.isArray(asset)) return false;
+		const manifestAsset = asset;
+		return typeof manifestAsset.fileHash === "string" && (manifestAsset.signature === void 0 || typeof manifestAsset.signature === "string");
+	});
+};
+const createChildStorageUri = (baseStorageUri, relativePath) => {
+	const baseUrl = new URL(baseStorageUri);
+	baseUrl.pathname = `${baseUrl.pathname.replace(/\/+$/, "")}/${relativePath.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
+	return baseUrl.toString();
+};
+const getRelativeStorageDir = (relativePath) => {
+	const normalized = relativePath.replace(/\\/g, "/");
+	const dirname = path.posix.dirname(normalized);
+	return dirname === "." ? "" : dirname;
+};
+async function downloadFromUrl(url) {
+	const response = await fetch(url);
+	if (!response.ok) throw new Error(`Failed to download storage object: ${response.status}`);
+	return new Uint8Array(await response.arrayBuffer());
+}
+async function downloadStorageBytes(storageUri, storagePlugin) {
+	const protocol = new URL(storageUri).protocol.replace(":", "");
+	if (protocol === "http" || protocol === "https") return downloadFromUrl(storageUri);
+	if (!storagePlugin) throw new Error("Storage plugin is not configured");
+	if (storagePlugin.supportedProtocol !== protocol) throw new Error(`No storage plugin for protocol: ${protocol}`);
+	const downloadRoot = path.join(process.cwd(), ".hot-updater");
+	await fs.mkdir(downloadRoot, { recursive: true });
+	const workDir = await fs.mkdtemp(path.join(downloadRoot, HOT_UPDATER_DOWNLOAD_DIR_PREFIX));
+	const filename = path.basename(new URL(storageUri).pathname) || randomUUID();
+	const filePath = path.join(workDir, filename);
+	try {
+		await storagePlugin.profiles.node.downloadFile(storageUri, filePath);
+		return new Uint8Array(await fs.readFile(filePath));
+	} finally {
+		await fs.rm(workDir, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+async function fetchManifest(bundle, storagePlugin) {
+	const manifestStorageUri = getManifestStorageUri(bundle);
+	if (!manifestStorageUri) throw new Error(`Bundle ${bundle.id} does not have manifest metadata`);
+	const manifestBytes = await downloadStorageBytes(manifestStorageUri, storagePlugin);
+	const payload = JSON.parse(new TextDecoder().decode(manifestBytes));
+	if (!isBundleManifest(payload)) throw new Error(`Invalid manifest payload for bundle ${bundle.id}`);
+	return payload;
+}
+function resolveHbcAssetPath(manifest) {
+	const candidates = Object.keys(manifest.assets).sort((left, right) => left.localeCompare(right)).filter((candidate) => HBC_ASSET_PATH_RE.test(candidate));
+	if (candidates.length === 0) throw new Error("No Hermes bundle asset found in manifest");
+	if (candidates.length > 1) throw new Error(`Expected exactly one Hermes bundle asset in manifest, found ${candidates.length}: ${candidates.join(", ")}`);
+	return candidates[0];
+}
+async function fetchAssetBytes(bundle, assetPath, storagePlugin) {
+	const assetBaseStorageUri = getAssetBaseStorageUri(bundle);
+	if (!assetBaseStorageUri) throw new Error(`Bundle ${bundle.id} does not have asset storage metadata`);
+	if (BR_COMPRESSED_ASSET_PATH_RE.test(assetPath)) {
+		const compressedAssetStorageUri = createChildStorageUri(assetBaseStorageUri, `${assetPath}.br`);
+		let compressedBytes = null;
+		try {
+			compressedBytes = await downloadStorageBytes(compressedAssetStorageUri, storagePlugin);
+		} catch {}
+		if (compressedBytes) return new Uint8Array(await decompressBrotli(compressedBytes));
+	}
+	return downloadStorageBytes(createChildStorageUri(assetBaseStorageUri, assetPath), storagePlugin);
+}
+async function getFileHash(filePath) {
+	const file = await fs.readFile(filePath);
+	return crypto.createHash("sha256").update(file).digest("hex");
+}
+function buildNextPatchState({ currentBundle, nextPatch, makePrimary }) {
+	const existingPatches = getBundlePatches(currentBundle).filter((patch) => patch.baseBundleId !== nextPatch.baseBundleId);
+	const orderedPatches = makePrimary ? [nextPatch, ...existingPatches] : [...existingPatches, nextPatch];
+	return {
+		patches: orderedPatches,
+		primaryPatch: orderedPatches[0] ?? nextPatch
+	};
+}
+async function createBundleDiff({ baseBundleId, bundleId }, deps, options = {}) {
+	if (!deps.storagePlugin) throw new Error("Storage plugin is not configured");
+	if (baseBundleId === bundleId) throw new Error("Base bundle must be different from the target bundle");
+	const baseBundle = await deps.databasePlugin.getBundleById(baseBundleId);
+	const targetBundle = await deps.databasePlugin.getBundleById(bundleId);
+	if (!baseBundle || !targetBundle) throw new Error("Bundle not found");
+	if (baseBundle.platform !== targetBundle.platform) throw new Error("Base bundle platform must match the target bundle");
+	if (baseBundle.id.localeCompare(targetBundle.id) >= 0) throw new Error("Base bundle must be older than the target bundle");
+	const [baseManifest, targetManifest] = await Promise.all([fetchManifest(baseBundle, deps.storagePlugin), fetchManifest(targetBundle, deps.storagePlugin)]);
+	const baseAssetPath = resolveHbcAssetPath(baseManifest);
+	const targetAssetPath = resolveHbcAssetPath(targetManifest);
+	if (baseAssetPath !== targetAssetPath) throw new Error("Base and target Hermes asset paths do not match");
+	const baseAssetHash = baseManifest.assets[baseAssetPath]?.fileHash;
+	const targetAssetHash = targetManifest.assets[targetAssetPath]?.fileHash;
+	if (!baseAssetHash || !targetAssetHash) throw new Error("Hermes asset hash is missing from manifest");
+	if (baseAssetHash === targetAssetHash) throw new Error("Hermes bundle is unchanged; no diff patch is required");
+	const [baseBytes, targetBytes] = await Promise.all([fetchAssetBytes(baseBundle, baseAssetPath, deps.storagePlugin), fetchAssetBytes(targetBundle, targetAssetPath, deps.storagePlugin)]);
+	const patchBytes = await hdiff(baseBytes, targetBytes);
+	const workDir = await fs.mkdtemp(path.join(os.tmpdir(), "hot-updater-console-bsdiff-"));
+	const patchFilename = `${path.posix.basename(targetAssetPath)}.bsdiff`;
+	const patchPath = path.join(workDir, patchFilename);
+	const previousPatch = getBundlePatch(targetBundle, baseBundle.id);
+	try {
+		await fs.writeFile(patchPath, patchBytes);
+		const uploadKey = [
+			targetBundle.id,
+			"patches",
+			baseBundle.id,
+			getRelativeStorageDir(targetAssetPath)
+		].filter(Boolean).join("/");
+		const patchUpload = await deps.storagePlugin.profiles.node.upload(uploadKey, patchPath);
+		const patchFileHash = await getFileHash(patchPath);
+		const nextState = buildNextPatchState({
+			currentBundle: targetBundle,
+			nextPatch: {
+				baseBundleId: baseBundle.id,
+				baseFileHash: baseAssetHash,
+				patchFileHash,
+				patchStorageUri: patchUpload.storageUri
+			},
+			makePrimary: options.makePrimary ?? true
+		});
+		await deps.databasePlugin.updateBundle(targetBundle.id, {
+			patches: nextState.patches,
+			patchBaseBundleId: nextState.primaryPatch.baseBundleId,
+			patchBaseFileHash: nextState.primaryPatch.baseFileHash,
+			patchFileHash: nextState.primaryPatch.patchFileHash,
+			patchStorageUri: nextState.primaryPatch.patchStorageUri
+		});
+		await deps.databasePlugin.commitBundle();
+		if (previousPatch?.patchStorageUri && previousPatch.patchStorageUri !== patchUpload.storageUri) await deps.storagePlugin.profiles.node.delete(previousPatch.patchStorageUri).catch(() => {});
+		const updatedBundle = await deps.databasePlugin.getBundleById(targetBundle.id);
+		if (!updatedBundle) throw new Error("Updated bundle not found");
+		return updatedBundle;
+	} finally {
+		await fs.rm(workDir, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+//#endregion
+export { createBundleDiff };