@hot-updater/server 0.31.4 → 0.33.0

package/dist/db/pluginCore.mjs

@@ -1,6 +1,7 @@
 import { assertBundlePersistenceConstraints } from "./schemaEnhancements.mjs";
 import { resolveManifestArtifacts } from "./updateArtifacts.mjs";
-import { semverSatisfies } from "@hot-updater/plugin-core";
+import { createRequestBundleIdentityMap } from "./requestBundleIdentityMap.mjs";
+import { getRequestUpdateBundleSeeds, semverSatisfies } from "@hot-updater/plugin-core";
 import { NIL_UUID, isCohortEligibleForUpdate } from "@hot-updater/core";
 //#region src/db/pluginCore.ts
 const PAGE_SIZE = 100;
@@ -110,109 +111,148 @@ function createPluginDatabaseCore(getPlugin, resolveFileUrl, options) {
 		enabled: true,
 		id: { gte: minBundleId }
 	});
-	return {
-		api: {
-			async getBundleById(id, context) {
-				return getPlugin().getBundleById(id, context);
-			},
-			async getUpdateInfo(args, context) {
-				const directGetUpdateInfo = getPlugin().getUpdateInfo;
-				if (directGetUpdateInfo) return context === void 0 ? await directGetUpdateInfo(args) : await directGetUpdateInfo(args, context);
-				const channel = args.channel ?? "production";
-				const minBundleId = args.minBundleId ?? NIL_UUID;
-				const baseWhere = getBaseWhere({
-					platform: args.platform,
-					channel,
-					minBundleId
-				});
-				if (args._updateStrategy === "fingerprint") return findUpdateInfoByScanning({
-					args,
-					queryWhere: {
-						...baseWhere,
-						fingerprintHash: args.fingerprintHash
-					},
-					context,
-					isCandidate: (bundle) => {
-						return bundle.enabled && bundle.platform === args.platform && bundle.channel === channel && bundle.id.localeCompare(minBundleId) >= 0 && bundle.fingerprintHash === args.fingerprintHash;
-					}
-				});
-				return findUpdateInfoByScanning({
-					args,
-					queryWhere: { ...baseWhere },
-					context,
-					isCandidate: (bundle) => {
-						return bundle.enabled && bundle.platform === args.platform && bundle.channel === channel && bundle.id.localeCompare(minBundleId) >= 0 && !!bundle.targetAppVersion && semverSatisfies(bundle.targetAppVersion, args.appVersion);
-					}
-				});
-			},
-			async getAppUpdateInfo(args, context) {
-				const info = await this.getUpdateInfo(args, context);
-				if (!info) return null;
-				const { storageUri, ...rest } = info;
-				const readStorageText = options?.readStorageText;
-				if (info.id === NIL_UUID || !readStorageText) {
-					const fileUrl = await resolveFileUrl(storageUri ?? null, context);
-					return {
-						...rest,
-						fileUrl
-					};
+	const api = {
+		async getBundleById(id, context) {
+			return getPlugin().getBundleById(id, context);
+		},
+		async getUpdateInfo(args, context) {
+			const directGetUpdateInfo = getPlugin().getUpdateInfo;
+			if (directGetUpdateInfo) return context === void 0 ? await directGetUpdateInfo(args) : await directGetUpdateInfo(args, context);
+			const channel = args.channel ?? "production";
+			const minBundleId = args.minBundleId ?? NIL_UUID;
+			const baseWhere = getBaseWhere({
+				platform: args.platform,
+				channel,
+				minBundleId
+			});
+			if (args._updateStrategy === "fingerprint") return findUpdateInfoByScanning({
+				args,
+				queryWhere: {
+					...baseWhere,
+					fingerprintHash: args.fingerprintHash
+				},
+				context,
+				isCandidate: (bundle) => {
+					return bundle.enabled && bundle.platform === args.platform && bundle.channel === channel && bundle.id.localeCompare(minBundleId) >= 0 && bundle.fingerprintHash === args.fingerprintHash;
+				}
+			});
+			return findUpdateInfoByScanning({
+				args,
+				queryWhere: { ...baseWhere },
+				context,
+				isCandidate: (bundle) => {
+					return bundle.enabled && bundle.platform === args.platform && bundle.channel === channel && bundle.id.localeCompare(minBundleId) >= 0 && !!bundle.targetAppVersion && semverSatisfies(bundle.targetAppVersion, args.appVersion);
 				}
-				const [fileUrl, targetBundle, currentBundle] = await Promise.all([
-					resolveFileUrl(storageUri ?? null, context),
-					getPlugin().getBundleById(info.id, context),
-					args.bundleId !== NIL_UUID ? getPlugin().getBundleById(args.bundleId, context) : null
-				]);
-				const baseResponse = {
+			});
+		},
+		async getAppUpdateInfo(args, context) {
+			const info = await this.getUpdateInfo(args, context);
+			if (!info) return null;
+			const { storageUri, ...rest } = info;
+			const readStorageText = options?.readStorageText;
+			if (info.id === NIL_UUID || !readStorageText) {
+				const fileUrl = await resolveFileUrl(storageUri ?? null, context);
+				return {
 					...rest,
 					fileUrl
 				};
-				const manifestArtifacts = await resolveManifestArtifacts({
-					currentBundle,
-					resolveFileUrl,
-					readStorageText,
-					targetBundle,
-					context
-				});
-				if (!manifestArtifacts) return baseResponse;
-				return {
-					...baseResponse,
-					...manifestArtifacts
-				};
-			},
-			async getChannels(context) {
-				return getPlugin().getChannels(context);
-			},
-			async getBundles(options, context) {
-				return getPlugin().getBundles(options, context);
-			},
-			async insertBundle(bundle, context) {
-				assertBundlePersistenceConstraints(bundle);
-				await runWithMutationPlugin(async (plugin) => {
-					await plugin.appendBundle(bundle, context);
-					await plugin.commitBundle(context);
-				});
-			},
-			async updateBundleById(bundleId, newBundle, context) {
-				await runWithMutationPlugin(async (plugin) => {
-					const current = await plugin.getBundleById(bundleId, context);
-					if (!current) throw new Error("targetBundleId not found");
-					assertBundlePersistenceConstraints({
-						...current,
-						...newBundle
-					});
-					await plugin.updateBundle(bundleId, newBundle, context);
-					await plugin.commitBundle(context);
+			}
+			const requestBundleSeeds = getRequestUpdateBundleSeeds(context);
+			const requestBundles = createRequestBundleIdentityMap({
+				context,
+				loadBundleById: (bundleId, requestContext) => getPlugin().getBundleById(bundleId, requestContext),
+				seeds: requestBundleSeeds
+			});
+			const getCurrentBundle = () => {
+				if (args.bundleId === NIL_UUID) return null;
+				const seededCurrentBundle = requestBundles.peek(args.bundleId);
+				if (seededCurrentBundle || requestBundleSeeds.length > 0) return seededCurrentBundle;
+				return requestBundles.get(args.bundleId);
+			};
+			const [fileUrl, targetBundle, currentBundle] = await Promise.all([
+				resolveFileUrl(storageUri ?? null, context),
+				requestBundles.get(info.id),
+				getCurrentBundle()
+			]);
+			const baseResponse = {
+				...rest,
+				fileUrl
+			};
+			const manifestArtifacts = await resolveManifestArtifacts({
+				currentBundle,
+				resolveFileUrl,
+				readStorageText,
+				targetBundle,
+				context
+			});
+			if (!manifestArtifacts) return baseResponse;
+			return {
+				...baseResponse,
+				...manifestArtifacts
+			};
+		},
+		async getChannels(context) {
+			return getPlugin().getChannels(context);
+		},
+		async getBundles(options, context) {
+			return getPlugin().getBundles(options, context);
+		},
+		async insertBundle(bundle, context) {
+			assertBundlePersistenceConstraints(bundle);
+			await runWithMutationPlugin(async (plugin) => {
+				await plugin.appendBundle(bundle, context);
+				await plugin.commitBundle(context);
+			});
+		},
+		async updateBundleById(bundleId, newBundle, context) {
+			await runWithMutationPlugin(async (plugin) => {
+				const current = await plugin.getBundleById(bundleId, context);
+				if (!current) throw new Error("targetBundleId not found");
+				assertBundlePersistenceConstraints({
+					...current,
+					...newBundle
 				});
-			},
-			async deleteBundleById(bundleId, context) {
-				await runWithMutationPlugin(async (plugin) => {
-					const bundle = await plugin.getBundleById(bundleId, context);
-					if (!bundle) return;
-					await plugin.deleteBundle(bundle, context);
-					await plugin.commitBundle(context);
+				await plugin.updateBundle(bundleId, newBundle, context);
+				await plugin.commitBundle(context);
+			});
+		},
+		async deleteBundleById(bundleId, context) {
+			await runWithMutationPlugin(async (plugin) => {
+				const bundle = await plugin.getBundleById(bundleId, context);
+				if (!bundle) return;
+				await plugin.deleteBundle(bundle, context);
+				await plugin.commitBundle(context);
+			});
+		}
+	};
+	Object.defineProperty(api, "diagnostics", {
+		configurable: true,
+		enumerable: true,
+		get() {
+			const diagnostics = getPlugin().diagnostics;
+			if (!diagnostics) {
+				Object.defineProperty(this, "diagnostics", {
+					configurable: true,
+					enumerable: true,
+					value: void 0
 				});
+				return;
 			}
-		},
+			const wrappedDiagnostics = {};
+			if (diagnostics.bundleIndex) wrappedDiagnostics.bundleIndex = {
+				check: (context) => getPlugin().diagnostics.bundleIndex.check(context),
+				...diagnostics.bundleIndex.repair ? { repair: (context) => getPlugin().diagnostics.bundleIndex.repair(context) } : {}
+			};
+			Object.defineProperty(this, "diagnostics", {
+				configurable: true,
+				enumerable: true,
+				value: wrappedDiagnostics
+			});
+			return wrappedDiagnostics;
+		}
+	});
+	return {
+		api,
 		adapterName: getPlugin().name,
 		createMigrator: () => {
 			throw new Error("createMigrator is only available for Kysely/Prisma/Drizzle database adapters.");

package/dist/db/requestBundleIdentityMap.cjs

@@ -0,0 +1,29 @@
+//#region src/db/requestBundleIdentityMap.ts
+const createRequestBundleIdentityMap = ({ context, loadBundleById, seeds }) => {
+	const bundles = /* @__PURE__ */ new Map();
+	const pendingBundles = /* @__PURE__ */ new Map();
+	for (const seed of seeds) if (seed) bundles.set(seed.id, seed);
+	const get = async (bundleId) => {
+		const cachedBundle = bundles.get(bundleId);
+		if (cachedBundle) return cachedBundle;
+		const pendingBundle = pendingBundles.get(bundleId);
+		if (pendingBundle) return pendingBundle;
+		const lookup = loadBundleById(bundleId, context).then((bundle) => {
+			pendingBundles.delete(bundleId);
+			if (bundle) bundles.set(bundle.id, bundle);
+			return bundle;
+		}, (error) => {
+			pendingBundles.delete(bundleId);
+			throw error;
+		});
+		pendingBundles.set(bundleId, lookup);
+		return lookup;
+	};
+	const peek = (bundleId) => bundles.get(bundleId) ?? null;
+	return {
+		get,
+		peek
+	};
+};
+//#endregion
+exports.createRequestBundleIdentityMap = createRequestBundleIdentityMap;

package/dist/db/requestBundleIdentityMap.mjs

@@ -0,0 +1,29 @@
+//#region src/db/requestBundleIdentityMap.ts
+const createRequestBundleIdentityMap = ({ context, loadBundleById, seeds }) => {
+	const bundles = /* @__PURE__ */ new Map();
+	const pendingBundles = /* @__PURE__ */ new Map();
+	for (const seed of seeds) if (seed) bundles.set(seed.id, seed);
+	const get = async (bundleId) => {
+		const cachedBundle = bundles.get(bundleId);
+		if (cachedBundle) return cachedBundle;
+		const pendingBundle = pendingBundles.get(bundleId);
+		if (pendingBundle) return pendingBundle;
+		const lookup = loadBundleById(bundleId, context).then((bundle) => {
+			pendingBundles.delete(bundleId);
+			if (bundle) bundles.set(bundle.id, bundle);
+			return bundle;
+		}, (error) => {
+			pendingBundles.delete(bundleId);
+			throw error;
+		});
+		pendingBundles.set(bundleId, lookup);
+		return lookup;
+	};
+	const peek = (bundleId) => bundles.get(bundleId) ?? null;
+	return {
+		get,
+		peek
+	};
+};
+//#endregion
+export { createRequestBundleIdentityMap };

package/dist/db/schemaEnhancements.cjs

@@ -1,7 +1,7 @@
 const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
 let _hot_updater_core = require("@hot-updater/core");
 let semver = require("semver");
-semver = require_runtime.__toESM(semver, 1);
+semver = require_runtime.__toESM(semver);
 //#region src/db/schemaEnhancements.ts
 const normalizeNullableString = (value) => {
 	if (value === null || value === void 0) return null;

package/dist/db/types.d.cts

@@ -1,7 +1,7 @@
 import { Provider } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/index-CMqePMTF.cjs";
 import { PaginatedResult } from "../types/index.cjs";
 import { AppUpdateAvailableInfo, Bundle, GetBundlesArgs, UpdateInfo } from "@hot-updater/core";
-import { DatabaseBundleQueryOptions, DatabasePlugin, HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
+import { DatabaseBundleQueryOptions, DatabaseDiagnostics, DatabasePlugin, HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
 
 //#region src/db/types.d.ts
 type DatabasePluginFactory<TContext = unknown> = () => DatabasePlugin<TContext>;
@@ -27,6 +27,7 @@ interface DatabaseAPI<TContext = unknown> {
   insertBundle(bundle: Bundle, context?: HotUpdaterContext<TContext>): Promise<void>;
   updateBundleById(bundleId: string, newBundle: Partial<Bundle>, context?: HotUpdaterContext<TContext>): Promise<void>;
   deleteBundleById(bundleId: string, context?: HotUpdaterContext<TContext>): Promise<void>;
+  diagnostics?: DatabaseDiagnostics<TContext>;
 }
 type StoragePluginFactory<TContext = unknown> = () => RuntimeStoragePlugin<TContext>;
 //#endregion

package/dist/db/types.d.mts

@@ -1,6 +1,6 @@
 import { Provider } from "../node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/index-CMqePMTF.mjs";
 import { PaginatedResult } from "../types/index.mjs";
-import { DatabaseBundleQueryOptions, DatabasePlugin, HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
+import { DatabaseBundleQueryOptions, DatabaseDiagnostics, DatabasePlugin, HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
 import { AppUpdateAvailableInfo, Bundle as Bundle$1, GetBundlesArgs, UpdateInfo } from "@hot-updater/core";
 
 //#region src/db/types.d.ts
@@ -27,6 +27,7 @@ interface DatabaseAPI<TContext = unknown> {
   insertBundle(bundle: Bundle$1, context?: HotUpdaterContext<TContext>): Promise<void>;
   updateBundleById(bundleId: string, newBundle: Partial<Bundle$1>, context?: HotUpdaterContext<TContext>): Promise<void>;
   deleteBundleById(bundleId: string, context?: HotUpdaterContext<TContext>): Promise<void>;
+  diagnostics?: DatabaseDiagnostics<TContext>;
 }
 type StoragePluginFactory<TContext = unknown> = () => RuntimeStoragePlugin<TContext>;
 //#endregion

package/dist/db/updateArtifacts.cjs

@@ -1,4 +1,5 @@
 require("../_virtual/_rolldown/runtime.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let _hot_updater_core = require("@hot-updater/core");
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
@@ -18,11 +19,6 @@ const isBundleManifest = (value) => {
 		return typeof manifestAsset.fileHash === "string" && (manifestAsset.signature === void 0 || typeof manifestAsset.signature === "string");
 	});
 };
-const createChildStorageUri = (baseStorageUri, relativePath) => {
-	const baseUrl = new URL(baseStorageUri);
-	baseUrl.pathname = `${baseUrl.pathname.replace(/\/+$/, "")}/${relativePath.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
-	return baseUrl.toString();
-};
 const parseBundleMetadata = (value) => {
 	if (!value) return;
 	let parsedValue = value;
@@ -61,7 +57,11 @@ async function resolveChangedAssets({ assetBaseStorageUri, currentManifest, curr
 	const changedEntries = await Promise.all(Object.entries(targetManifest.assets).map(async ([assetPath, asset]) => {
 		if ((currentManifest?.assets[assetPath])?.fileHash === asset.fileHash) return null;
 		const usesBrotliAsset = BR_COMPRESSED_ASSET_PATH_RE.test(assetPath);
-		const storageUri = createChildStorageUri(assetBaseStorageUri, usesBrotliAsset ? `${assetPath}.br` : assetPath);
+		const storageUri = (0, _hot_updater_plugin_core.resolveManifestAssetStorageUri)({
+			assetBaseStorageUri,
+			assetPath: usesBrotliAsset ? `${assetPath}.br` : assetPath,
+			fileHash: asset.fileHash
+		});
 		const patch = patchDescriptor?.assetPath === assetPath ? patchDescriptor.patch : null;
 		let fileUrl = null;
 		try {

package/dist/db/updateArtifacts.mjs

@@ -1,3 +1,4 @@
+import { resolveManifestAssetStorageUri } from "@hot-updater/plugin-core";
 import { getAssetBaseStorageUri, getBundlePatch, getManifestFileHash, getManifestStorageUri, stripBundleArtifactMetadata } from "@hot-updater/core";
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
@@ -17,11 +18,6 @@ const isBundleManifest = (value) => {
 		return typeof manifestAsset.fileHash === "string" && (manifestAsset.signature === void 0 || typeof manifestAsset.signature === "string");
 	});
 };
-const createChildStorageUri = (baseStorageUri, relativePath) => {
-	const baseUrl = new URL(baseStorageUri);
-	baseUrl.pathname = `${baseUrl.pathname.replace(/\/+$/, "")}/${relativePath.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
-	return baseUrl.toString();
-};
 const parseBundleMetadata = (value) => {
 	if (!value) return;
 	let parsedValue = value;
@@ -60,7 +56,11 @@ async function resolveChangedAssets({ assetBaseStorageUri, currentManifest, curr
 	const changedEntries = await Promise.all(Object.entries(targetManifest.assets).map(async ([assetPath, asset]) => {
 		if ((currentManifest?.assets[assetPath])?.fileHash === asset.fileHash) return null;
 		const usesBrotliAsset = BR_COMPRESSED_ASSET_PATH_RE.test(assetPath);
-		const storageUri = createChildStorageUri(assetBaseStorageUri, usesBrotliAsset ? `${assetPath}.br` : assetPath);
+		const storageUri = resolveManifestAssetStorageUri({
+			assetBaseStorageUri,
+			assetPath: usesBrotliAsset ? `${assetPath}.br` : assetPath,
+			fileHash: asset.fileHash
+		});
 		const patch = patchDescriptor?.assetPath === assetPath ? patchDescriptor.patch : null;
 		let fileUrl = null;
 		try {

package/dist/handler.cjs

@@ -2,7 +2,7 @@ const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
 const require_internalRouter = require("./internalRouter.cjs");
 const require_version = require("./version.cjs");
 let semver = require("semver");
-semver = require_runtime.__toESM(semver, 1);
+semver = require_runtime.__toESM(semver);
 //#region src/handler.ts
 var HandlerBadRequestError = class extends Error {
 	constructor(message) {
@@ -12,6 +12,8 @@ var HandlerBadRequestError = class extends Error {
 };
 const SDK_VERSION_HEADER = "Hot-Updater-SDK-Version";
 const EXPLICIT_NO_UPDATE_MIN_SDK_VERSION = "0.31.0";
+const DEFAULT_BUNDLE_LIST_LIMIT = 50;
+const MAX_BUNDLE_LIST_LIMIT = 100;
 const supportsExplicitNoUpdateResponse = (request) => {
 	const sdkVersion = request.headers.get(SDK_VERSION_HEADER)?.trim();
 	if (!sdkVersion) return false;
@@ -61,6 +63,13 @@ const parseStringArraySearchParam = (url, key) => {
 	const values = url.searchParams.getAll(key);
 	return values.length > 0 ? values : void 0;
 };
+const parsePositiveIntegerSearchParam = (url, key, defaultValue, maxValue) => {
+	const value = url.searchParams.get(key);
+	if (value === null) return defaultValue;
+	const parsed = Number(value);
+	if (!Number.isInteger(parsed) || parsed < 1 || parsed > maxValue) throw new HandlerBadRequestError(`The '${key}' query parameter must be a positive integer between 1 and ${maxValue}.`);
+	return parsed;
+};
 const requirePlatformParam = (params) => {
 	const platform = requireRouteParam(params, "platform");
 	if (!isPlatform(platform)) throw new HandlerBadRequestError(`Invalid platform: ${platform}. Expected 'ios' or 'android'.`);
@@ -129,7 +138,7 @@ const handleGetBundles = async (_params, request, api, context) => {
 	const url = new URL(request.url);
 	const channel = url.searchParams.get("channel") ?? void 0;
 	const platform = url.searchParams.get("platform");
-	const limit = Number(url.searchParams.get("limit")) || 50;
+	const limit = parsePositiveIntegerSearchParam(url, "limit", DEFAULT_BUNDLE_LIST_LIMIT, MAX_BUNDLE_LIST_LIMIT);
 	const pageParam = url.searchParams.get("page");
 	const offset = url.searchParams.get("offset");
 	const after = url.searchParams.get("after") ?? void 0;
@@ -231,18 +240,19 @@ const routes = {
 */
 function createHandler(api, options = {}) {
 	const basePath = options.basePath ?? "/api";
-	const updateCheckEnabled = options.routes?.updateCheck ?? true;
-	const versionEnabled = options.routes?.version ?? true;
-	const bundlesEnabled = options.routes?.bundles ?? true;
+	const routeOptions = {
+		updateCheck: options.routes?.updateCheck ?? true,
+		bundles: options.routes?.bundles ?? false
+	};
 	const router = require_internalRouter.createRouter();
-	if (versionEnabled) require_internalRouter.addRoute(router, "GET", "/version", "version");
-	if (updateCheckEnabled) {
+	require_internalRouter.addRoute(router, "GET", "/version", "version");
+	if (routeOptions.updateCheck) {
 		require_internalRouter.addRoute(router, "GET", "/fingerprint/:platform/:fingerprintHash/:channel/:minBundleId/:bundleId", "fingerprintUpdateWithCohort");
 		require_internalRouter.addRoute(router, "GET", "/fingerprint/:platform/:fingerprintHash/:channel/:minBundleId/:bundleId/:cohort", "fingerprintUpdateWithCohort");
 		require_internalRouter.addRoute(router, "GET", "/app-version/:platform/:appVersion/:channel/:minBundleId/:bundleId", "appVersionUpdateWithCohort");
 		require_internalRouter.addRoute(router, "GET", "/app-version/:platform/:appVersion/:channel/:minBundleId/:bundleId/:cohort", "appVersionUpdateWithCohort");
 	}
-	if (bundlesEnabled) {
+	if (routeOptions.bundles) {
 		require_internalRouter.addRoute(router, "GET", "/api/bundles/channels", "getChannels");
 		require_internalRouter.addRoute(router, "GET", "/api/bundles/:id", "getBundle");
 		require_internalRouter.addRoute(router, "GET", "/api/bundles", "getBundles");

package/dist/handler.d.cts

@@ -18,27 +18,26 @@ interface HandlerOptions {
    * @default "/api"
    */
   basePath?: string;
+  /**
+   * Route groups to mount. Omit this option to use the default route groups.
+   * When provided, both route groups must be specified explicitly.
+   * The `/version` endpoint is always mounted for diagnostics.
+   */
   routes?: HandlerRoutes;
 }
 interface HandlerRoutes {
   /**
    * Controls whether update-check routes are mounted.
-   * @default true
-   */
-  updateCheck?: boolean;
-  /**
-   * Controls whether the `/version` endpoint is mounted.
-   * Useful for diagnostics and lightweight health/version checks.
-   * @default true
+   * Defaults to `true` only when `routes` is omitted.
    */
-  version?: boolean;
+  updateCheck: boolean;
   /**
    * Controls whether bundle management routes are mounted.
    * This includes `/api/bundles*`, which are used by the
    * CLI `standaloneRepository` plugin.
-   * @default true
+   * Defaults to `false` only when `routes` is omitted.
    */
-  bundles?: boolean;
+  bundles: boolean;
 }
 /**
  * Creates a Web Standard Request handler for Hot Updater API

package/dist/handler.d.mts

@@ -18,27 +18,26 @@ interface HandlerOptions {
    * @default "/api"
    */
   basePath?: string;
+  /**
+   * Route groups to mount. Omit this option to use the default route groups.
+   * When provided, both route groups must be specified explicitly.
+   * The `/version` endpoint is always mounted for diagnostics.
+   */
   routes?: HandlerRoutes;
 }
 interface HandlerRoutes {
   /**
    * Controls whether update-check routes are mounted.
-   * @default true
-   */
-  updateCheck?: boolean;
-  /**
-   * Controls whether the `/version` endpoint is mounted.
-   * Useful for diagnostics and lightweight health/version checks.
-   * @default true
+   * Defaults to `true` only when `routes` is omitted.
    */
-  version?: boolean;
+  updateCheck: boolean;
   /**
    * Controls whether bundle management routes are mounted.
    * This includes `/api/bundles*`, which are used by the
    * CLI `standaloneRepository` plugin.
-   * @default true
+   * Defaults to `false` only when `routes` is omitted.
    */
-  bundles?: boolean;
+  bundles: boolean;
 }
 /**
  * Creates a Web Standard Request handler for Hot Updater API

package/dist/handler.mjs

@@ -10,6 +10,8 @@ var HandlerBadRequestError = class extends Error {
 };
 const SDK_VERSION_HEADER = "Hot-Updater-SDK-Version";
 const EXPLICIT_NO_UPDATE_MIN_SDK_VERSION = "0.31.0";
+const DEFAULT_BUNDLE_LIST_LIMIT = 50;
+const MAX_BUNDLE_LIST_LIMIT = 100;
 const supportsExplicitNoUpdateResponse = (request) => {
 	const sdkVersion = request.headers.get(SDK_VERSION_HEADER)?.trim();
 	if (!sdkVersion) return false;
@@ -59,6 +61,13 @@ const parseStringArraySearchParam = (url, key) => {
 	const values = url.searchParams.getAll(key);
 	return values.length > 0 ? values : void 0;
 };
+const parsePositiveIntegerSearchParam = (url, key, defaultValue, maxValue) => {
+	const value = url.searchParams.get(key);
+	if (value === null) return defaultValue;
+	const parsed = Number(value);
+	if (!Number.isInteger(parsed) || parsed < 1 || parsed > maxValue) throw new HandlerBadRequestError(`The '${key}' query parameter must be a positive integer between 1 and ${maxValue}.`);
+	return parsed;
+};
 const requirePlatformParam = (params) => {
 	const platform = requireRouteParam(params, "platform");
 	if (!isPlatform(platform)) throw new HandlerBadRequestError(`Invalid platform: ${platform}. Expected 'ios' or 'android'.`);
@@ -127,7 +136,7 @@ const handleGetBundles = async (_params, request, api, context) => {
 	const url = new URL(request.url);
 	const channel = url.searchParams.get("channel") ?? void 0;
 	const platform = url.searchParams.get("platform");
-	const limit = Number(url.searchParams.get("limit")) || 50;
+	const limit = parsePositiveIntegerSearchParam(url, "limit", DEFAULT_BUNDLE_LIST_LIMIT, MAX_BUNDLE_LIST_LIMIT);
 	const pageParam = url.searchParams.get("page");
 	const offset = url.searchParams.get("offset");
 	const after = url.searchParams.get("after") ?? void 0;
@@ -229,18 +238,19 @@ const routes = {
 */
 function createHandler(api, options = {}) {
 	const basePath = options.basePath ?? "/api";
-	const updateCheckEnabled = options.routes?.updateCheck ?? true;
-	const versionEnabled = options.routes?.version ?? true;
-	const bundlesEnabled = options.routes?.bundles ?? true;
+	const routeOptions = {
+		updateCheck: options.routes?.updateCheck ?? true,
+		bundles: options.routes?.bundles ?? false
+	};
 	const router = createRouter();
-	if (versionEnabled) addRoute(router, "GET", "/version", "version");
-	if (updateCheckEnabled) {
+	addRoute(router, "GET", "/version", "version");
+	if (routeOptions.updateCheck) {
 		addRoute(router, "GET", "/fingerprint/:platform/:fingerprintHash/:channel/:minBundleId/:bundleId", "fingerprintUpdateWithCohort");
 		addRoute(router, "GET", "/fingerprint/:platform/:fingerprintHash/:channel/:minBundleId/:bundleId/:cohort", "fingerprintUpdateWithCohort");
 		addRoute(router, "GET", "/app-version/:platform/:appVersion/:channel/:minBundleId/:bundleId", "appVersionUpdateWithCohort");
 		addRoute(router, "GET", "/app-version/:platform/:appVersion/:channel/:minBundleId/:bundleId/:cohort", "appVersionUpdateWithCohort");
 	}
-	if (bundlesEnabled) {
+	if (routeOptions.bundles) {
 		addRoute(router, "GET", "/api/bundles/channels", "getChannels");
 		addRoute(router, "GET", "/api/bundles/:id", "getBundle");
 		addRoute(router, "GET", "/api/bundles", "getBundles");

package/dist/index.d.cts

@@ -4,4 +4,4 @@ import { HotUpdaterClient, HotUpdaterDB, Migrator } from "./db/ormCore.cjs";
 import { HOT_UPDATER_SERVER_VERSION } from "./version.cjs";
 import { CreateHotUpdaterOptions, HotUpdaterAPI, createHotUpdater } from "./db/index.cjs";
 import { Bundle, ChannelsResponse, DataResponse, Paginated, PaginatedResult, PaginationInfo, PaginationOptions } from "./types/index.cjs";
-export { type Bundle, ChannelsResponse, CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, CreateHotUpdaterOptions, DataResponse, HOT_UPDATER_SERVER_VERSION, HandlerAPI, HandlerOptions, HandlerRoutes, HotUpdaterAPI, type HotUpdaterClient, HotUpdaterDB, type Migrator, Paginated, PaginatedResult, PaginationInfo, PaginationOptions, createBundleDiff, createHandler, createHotUpdater };
+export { Bundle, ChannelsResponse, CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, CreateHotUpdaterOptions, DataResponse, HOT_UPDATER_SERVER_VERSION, HandlerAPI, HandlerOptions, HandlerRoutes, HotUpdaterAPI, HotUpdaterClient, HotUpdaterDB, Migrator, Paginated, PaginatedResult, PaginationInfo, PaginationOptions, createBundleDiff, createHandler, createHotUpdater };

package/dist/index.d.mts

@@ -4,4 +4,4 @@ import { HotUpdaterClient, HotUpdaterDB, Migrator } from "./db/ormCore.mjs";
 import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { CreateHotUpdaterOptions, HotUpdaterAPI, createHotUpdater } from "./db/index.mjs";
 import { Bundle, ChannelsResponse, DataResponse, Paginated, PaginatedResult, PaginationInfo, PaginationOptions } from "./types/index.mjs";
-export { type Bundle, ChannelsResponse, CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, CreateHotUpdaterOptions, DataResponse, HOT_UPDATER_SERVER_VERSION, HandlerAPI, HandlerOptions, HandlerRoutes, HotUpdaterAPI, type HotUpdaterClient, HotUpdaterDB, type Migrator, Paginated, PaginatedResult, PaginationInfo, PaginationOptions, createBundleDiff, createHandler, createHotUpdater };
+export { Bundle, ChannelsResponse, CreateBundleDiffDependencies, CreateBundleDiffInput, CreateBundleDiffOptions, CreateHotUpdaterOptions, DataResponse, HOT_UPDATER_SERVER_VERSION, HandlerAPI, HandlerOptions, HandlerRoutes, HotUpdaterAPI, HotUpdaterClient, HotUpdaterDB, Migrator, Paginated, PaginatedResult, PaginationInfo, PaginationOptions, createBundleDiff, createHandler, createHotUpdater };

package/dist/node_modules/.pnpm/fumadb@0.2.2_drizzle-orm@0.44.7_@cloudflare_workers-types@4.20260313.1_@electric-sql_pg_c72c8c754becd21f6d6662e8fbd28e7f/node_modules/fumadb/dist/index.d.cts

@@ -46,4 +46,4 @@ interface FumaDBFactory<Schemas extends AnySchema[]> {
 }
 type InferFumaDB<Factory extends FumaDBFactory<any>> = Factory extends FumaDBFactory<infer Schemas> ? FumaDB<Schemas> : never;
 //#endregion
-export type { FumaDBFactory, InferFumaDB };
+export { type FumaDBFactory, type InferFumaDB };