@hot-updater/server 0.36.7 → 1.0.0-rc.1

package/dist/apiKeys.mjs

@@ -0,0 +1,133 @@
+//#region src/apiKeys.ts
+const API_KEY_HEADER_NAME = "x-api-key";
+const BASE64URL_32_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
+const bytesToBase64Url = (bytes) => {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+const isApiKey = (value) => {
+	if (!BASE64URL_32_PATTERN.test(value)) return false;
+	try {
+		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+		const binary = atob(`${base64}=`);
+		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+		return bytes.byteLength === 32 && bytesToBase64Url(bytes) === value;
+	} catch {
+		return false;
+	}
+};
+const normalizeApiKeyHeaderName = (value = API_KEY_HEADER_NAME) => {
+	if (typeof value !== "string" || value.length === 0) throw new TypeError("clientAccess.headerName must be a valid header name.");
+	try {
+		const headers = new Headers();
+		headers.set(value, "");
+		return headers.keys().next().value;
+	} catch {
+		throw new TypeError("clientAccess.headerName must be a valid header name.");
+	}
+};
+const hashApiKey = async (apiKey) => {
+	if (!isApiKey(apiKey)) throw new TypeError("API key must be a canonical 32-byte base64url value.");
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(apiKey));
+	return bytesToBase64Url(new Uint8Array(digest));
+};
+const apiKeyId = () => {
+	const bytes = new Uint8Array(16);
+	crypto.getRandomValues(bytes);
+	return `api-${bytesToBase64Url(bytes)}`;
+};
+const normalizeApiKeyName = (name) => {
+	const normalized = name.trim();
+	if (normalized.length === 0 || normalized.length > 64 || /[\p{Cc}\p{Cf}]/u.test(normalized)) throw new TypeError("API key names must contain 1-64 visible characters.");
+	return normalized;
+};
+const toApiKeyMetadata = ({ hash: _hash, ...metadata }) => Object.freeze(metadata);
+const registerApiKey = async (input) => {
+	const hash = await hashApiKey(input.apiKey);
+	const createdAtMs = input.createdAtMs ?? Date.now();
+	if (!Number.isSafeInteger(createdAtMs) || createdAtMs < 0) throw new TypeError("API key creation time must be non-negative.");
+	const record = Object.freeze({
+		created_at_ms: createdAtMs,
+		hash,
+		id: apiKeyId(),
+		name: normalizeApiKeyName(input.name),
+		prefix: input.apiKey.slice(0, 6),
+		revoked_at_ms: null,
+		role: "client"
+	});
+	if (await input.apiKeys.create(record) === "existing") {
+		const existing = await input.apiKeys.findByHash(hash);
+		if (existing === null || existing.revoked_at_ms !== null) throw new Error("The API key has been revoked.");
+		return Object.freeze({
+			apiKey: input.apiKey,
+			record: toApiKeyMetadata(existing)
+		});
+	}
+	return Object.freeze({
+		apiKey: input.apiKey,
+		record: toApiKeyMetadata(record)
+	});
+};
+const createApiKey = (input) => {
+	const bytes = new Uint8Array(32);
+	crypto.getRandomValues(bytes);
+	return registerApiKey({
+		apiKey: bytesToBase64Url(bytes),
+		apiKeys: input.apiKeys,
+		name: input.name
+	});
+};
+/**
+* Provisions the client API key used by managed init.
+*
+* A saved plaintext key is registered idempotently; otherwise a new key is
+* created. Callers must persist or display the returned plaintext because the
+* database stores only its hash.
+*/
+const provisionApiKey = (input) => {
+	const existingApiKey = input.existingApiKey?.trim();
+	return existingApiKey ? registerApiKey({
+		apiKey: existingApiKey,
+		apiKeys: input.apiKeys,
+		name: input.name
+	}) : createApiKey({
+		apiKeys: input.apiKeys,
+		name: input.name
+	});
+};
+const authenticateApiKey = async (input) => {
+	const apiKey = input.request.headers.get(normalizeApiKeyHeaderName(input.headerName));
+	if (apiKey === null || !isApiKey(apiKey)) return false;
+	const hash = await hashApiKey(apiKey);
+	await input.beforeLookup?.();
+	const record = await input.apiKeys.findByHash(hash);
+	return record !== null && record.hash === hash && record.role === "client" && record.revoked_at_ms === null;
+};
+const createApiKeyManagement = (input) => Object.freeze({
+	async create({ name }) {
+		await input.beforeOperation();
+		const created = await createApiKey({
+			apiKeys: input.apiKeys,
+			name
+		});
+		return Object.freeze({
+			apiKey: created.apiKey,
+			record: created.record
+		});
+	},
+	async list() {
+		await input.beforeOperation();
+		return Object.freeze((await input.apiKeys.list()).map(toApiKeyMetadata));
+	},
+	async revoke({ id }) {
+		await input.beforeOperation();
+		const record = await input.apiKeys.revoke({
+			id,
+			revokedAtMs: Date.now()
+		});
+		return record === null ? null : toApiKeyMetadata(record);
+	}
+});
+//#endregion
+export { API_KEY_HEADER_NAME, authenticateApiKey, createApiKey, createApiKeyManagement, normalizeApiKeyHeaderName, provisionApiKey, registerApiKey };

package/dist/createHotUpdaterCore.cjs

@@ -1,50 +1,72 @@
 require("./_virtual/_rolldown/runtime.cjs");
 const require_handler = require("./handler.cjs");
-const require_pluginCore = require("./db/pluginCore.cjs");
+const require_provider = require("./insights/bounded/provider.cjs");
+const require_apiKeys = require("./apiKeys.cjs");
+const require_databasePluginCore = require("./db/databasePluginCore.cjs");
 const require_schemaReadiness = require("./db/schemaReadiness.cjs");
 const require_types = require("./db/types.cjs");
-const require_route = require("./route.cjs");
 const require_storageAccess = require("./storageAccess.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/createHotUpdaterCore.ts
+const normalizeClientAccess = (value) => {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new TypeError("clientAccess must be an object.");
+	const policy = value;
+	if (policy.type === "public") return { type: "public" };
+	if (policy.type === "api-key") return {
+		headerName: require_apiKeys.normalizeApiKeyHeaderName(policy.headerName),
+		type: "api-key"
+	};
+	throw new TypeError("clientAccess.type must be either \"public\" or \"api-key\".");
+};
 const hotUpdaterCoreMetadata = Symbol.for("@hot-updater/server/core-metadata");
 function getHotUpdaterCoreMetadata(hotUpdater) {
 	return hotUpdater[hotUpdaterCoreMetadata];
 }
 function createHotUpdaterCore(options) {
+	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
 	const database = options.database;
-	const basePath = require_route.normalizeBasePath(options.basePath ?? "/api");
-	const { readStorageText, resolveFileUrl } = require_storageAccess.createStorageAccess((options.storages ?? options.storagePlugins ?? []).map((plugin) => {
-		const storagePlugin = typeof plugin === "function" ? plugin() : plugin;
-		(0, _hot_updater_plugin_core.assertRuntimeStoragePlugin)(storagePlugin);
-		return storagePlugin;
+	const { downloadStorageObject, readStorageText, resolveFileUrl } = require_storageAccess.createStorageAccess((options.storage ?? []).map((storage) => {
+		(0, _hot_updater_plugin_core.assertStorageOperations)(storage, ["get", "getDownloadUrl"]);
+		return storage;
 	}));
-	if (!require_types.isDatabasePluginFactory(database) && !require_types.isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
 	const adapterCapabilities = database;
-	const plugin = require_types.isDatabasePluginFactory(database) ? database() : database;
+	if (!require_types.isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
+	const plugin = database;
 	const assertSchemaReady = require_schemaReadiness.createSchemaReadinessChecker(adapterCapabilities.adapterName ?? plugin.name, adapterCapabilities.createMigrator);
-	const core = require_pluginCore.createPluginDatabaseCore(() => plugin, resolveFileUrl, require_types.isDatabasePluginFactory(database) ? {
-		createMutationPlugin: () => database(),
-		beforeOperation: assertSchemaReady,
-		readStorageText
-	} : {
+	const core = require_databasePluginCore.createDatabasePluginCore(plugin, resolveFileUrl, {
 		beforeOperation: assertSchemaReady,
 		readStorageText
 	});
-	const internalHandler = require_handler.createHandler(core.api, {
-		basePath,
-		routes: options.routes
+	const clientAccess = normalizeClientAccess(options.clientAccess);
+	const insights = require_provider.createInsightsProvider({
+		async append(row) {
+			await assertSchemaReady();
+			return plugin.models.insights.append(row);
+		},
+		async scan(input) {
+			await assertSchemaReady();
+			return plugin.models.insights.scan(input);
+		}
 	});
-	const handler = (request, context, ...extraArgs) => {
-		if (extraArgs.length > 0) return internalHandler(request);
-		return internalHandler(request, context);
-	};
-	const api = {
-		basePath,
+	const apiKeys = require_apiKeys.createApiKeyManagement({
+		apiKeys: plugin.models.apiKeys,
+		beforeOperation: assertSchemaReady
+	});
+	const handlers = require_handler.createHotUpdaterHandlers(core.api, insights, clientAccess.type === "api-key" ? {
+		authenticate: (request) => require_apiKeys.authenticateApiKey({
+			apiKeys: plugin.models.apiKeys,
+			beforeLookup: assertSchemaReady,
+			headerName: clientAccess.headerName,
+			request
+		}),
+		headerName: clientAccess.headerName
+	} : void 0, downloadStorageObject);
+	const api = Object.assign({
 		adapterName: adapterCapabilities.adapterName ?? core.adapterName,
-		handler
-	};
-	Object.defineProperties(api, Object.getOwnPropertyDescriptors(core.api));
+		insights,
+		apiKeys,
+		handlers
+	}, core.api);
 	Object.defineProperty(api, hotUpdaterCoreMetadata, {
 		enumerable: false,
 		value: {

package/dist/createHotUpdaterCore.d.cts

@@ -1,25 +1,57 @@
-import { HandlerRoutes } from "./handler.cjs";
-import { DatabaseAPI, DatabaseAdapter, StoragePluginFactory } from "./db/types.cjs";
-import { HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
+import { ApiKeyManagementAPI } from "./apiKeys.cjs";
+import { HotUpdaterHandlers } from "./handlerTypes.cjs";
+import { InsightsProvider } from "./insights/types.cjs";
+import { DatabaseAPI, DatabasePlugin as DatabasePlugin$1 } from "./db/types.cjs";
+import { StoragePlugin } from "@hot-updater/plugin-core";
 
 //#region src/createHotUpdaterCore.d.ts
-type RuntimeHotUpdaterAPI<TContext = unknown> = DatabaseAPI<TContext> & {
-  readonly basePath: string;
-  readonly handler: (request: Request, context?: HotUpdaterContext<TContext>) => Promise<Response>;
+type RuntimeHotUpdaterAPI = DatabaseAPI & {
+  readonly handlers: HotUpdaterHandlers;
   readonly adapterName: string;
+  /**
+   * Built-in Insights provider. Client ingestion and admin query routes are
+   * always mounted; React Native clients report lifecycle events by default
+   * and can opt out with `HotUpdater.init({ insights: false })`.
+   */
+  readonly insights: InsightsProvider;
+  /**
+   * In-process API key lifecycle operations for trusted server tooling.
+   * Creation returns the plaintext once; list and revoke expose only metadata.
+   * This capability is never mounted on the client or admin HTTP handlers.
+   */
+  readonly apiKeys: ApiKeyManagementAPI;
+};
+type HotUpdaterAPI = RuntimeHotUpdaterAPI;
+type ClientAccessPolicy = {
+  /**
+   * Leaves Release Catalog, artifact, and Insights ingestion routes
+   * publicly accessible without a client credential.
+   */
+  readonly type: "public";
+} | {
+  /**
+   * Requires a key registered in `database.models.apiKeys` for
+   * Release Catalog, artifact, and Insights ingestion requests.
+   */
+  readonly type: "api-key";
+  /**
+   * Request header containing the API key. Defaults to
+   * `x-api-key`. Clients must send the same header; Release Catalog
+   * responses include it in `Vary` to preserve cache isolation.
+   */
+  readonly headerName?: string;
 };
-type HotUpdaterAPI<TContext = unknown> = RuntimeHotUpdaterAPI<TContext>;
-interface CreateHotUpdaterOptions<TContext = unknown> {
-  readonly database: DatabaseAdapter<TContext>;
-  readonly storages?: readonly (RuntimeStoragePlugin<TContext> | StoragePluginFactory<TContext>)[];
+interface CreateHotUpdaterOptions {
+  readonly database: DatabasePlugin$1;
   /**
-   * @deprecated Use `storages` instead. This field will be removed in a future version.
+   * Required client-route access policy. This choice is explicit so a server
+   * cannot accidentally change between public and authenticated OTA access.
+   * `/version`, storage downloads, and admin-handler routes are unaffected.
    */
-  readonly storagePlugins?: readonly (RuntimeStoragePlugin<TContext> | StoragePluginFactory<TContext>)[];
-  readonly basePath?: string;
-  readonly cwd?: string;
-  readonly routes?: HandlerRoutes;
+  readonly clientAccess: ClientAccessPolicy;
+  /** Storage implementations used to read provider-specific storage URIs. */
+  readonly storage?: readonly StoragePlugin[];
 }
-declare function createHotUpdater<TContext = unknown>(options: CreateHotUpdaterOptions<TContext>): RuntimeHotUpdaterAPI<TContext>;
+declare function createHotUpdater(options: CreateHotUpdaterOptions): RuntimeHotUpdaterAPI;
 //#endregion
-export { CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater };
+export { ClientAccessPolicy, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater };

package/dist/createHotUpdaterCore.d.mts

@@ -1,25 +1,57 @@
-import { HandlerRoutes } from "./handler.mjs";
-import { DatabaseAPI, DatabaseAdapter, StoragePluginFactory } from "./db/types.mjs";
-import { HotUpdaterContext, RuntimeStoragePlugin } from "@hot-updater/plugin-core";
+import { ApiKeyManagementAPI } from "./apiKeys.mjs";
+import { HotUpdaterHandlers } from "./handlerTypes.mjs";
+import { InsightsProvider } from "./insights/types.mjs";
+import { DatabaseAPI, DatabasePlugin as DatabasePlugin$1 } from "./db/types.mjs";
+import { StoragePlugin } from "@hot-updater/plugin-core";
 
 //#region src/createHotUpdaterCore.d.ts
-type RuntimeHotUpdaterAPI<TContext = unknown> = DatabaseAPI<TContext> & {
-  readonly basePath: string;
-  readonly handler: (request: Request, context?: HotUpdaterContext<TContext>) => Promise<Response>;
+type RuntimeHotUpdaterAPI = DatabaseAPI & {
+  readonly handlers: HotUpdaterHandlers;
   readonly adapterName: string;
+  /**
+   * Built-in Insights provider. Client ingestion and admin query routes are
+   * always mounted; React Native clients report lifecycle events by default
+   * and can opt out with `HotUpdater.init({ insights: false })`.
+   */
+  readonly insights: InsightsProvider;
+  /**
+   * In-process API key lifecycle operations for trusted server tooling.
+   * Creation returns the plaintext once; list and revoke expose only metadata.
+   * This capability is never mounted on the client or admin HTTP handlers.
+   */
+  readonly apiKeys: ApiKeyManagementAPI;
+};
+type HotUpdaterAPI = RuntimeHotUpdaterAPI;
+type ClientAccessPolicy = {
+  /**
+   * Leaves Release Catalog, artifact, and Insights ingestion routes
+   * publicly accessible without a client credential.
+   */
+  readonly type: "public";
+} | {
+  /**
+   * Requires a key registered in `database.models.apiKeys` for
+   * Release Catalog, artifact, and Insights ingestion requests.
+   */
+  readonly type: "api-key";
+  /**
+   * Request header containing the API key. Defaults to
+   * `x-api-key`. Clients must send the same header; Release Catalog
+   * responses include it in `Vary` to preserve cache isolation.
+   */
+  readonly headerName?: string;
 };
-type HotUpdaterAPI<TContext = unknown> = RuntimeHotUpdaterAPI<TContext>;
-interface CreateHotUpdaterOptions<TContext = unknown> {
-  readonly database: DatabaseAdapter<TContext>;
-  readonly storages?: readonly (RuntimeStoragePlugin<TContext> | StoragePluginFactory<TContext>)[];
+interface CreateHotUpdaterOptions {
+  readonly database: DatabasePlugin$1;
   /**
-   * @deprecated Use `storages` instead. This field will be removed in a future version.
+   * Required client-route access policy. This choice is explicit so a server
+   * cannot accidentally change between public and authenticated OTA access.
+   * `/version`, storage downloads, and admin-handler routes are unaffected.
    */
-  readonly storagePlugins?: readonly (RuntimeStoragePlugin<TContext> | StoragePluginFactory<TContext>)[];
-  readonly basePath?: string;
-  readonly cwd?: string;
-  readonly routes?: HandlerRoutes;
+  readonly clientAccess: ClientAccessPolicy;
+  /** Storage implementations used to read provider-specific storage URIs. */
+  readonly storage?: readonly StoragePlugin[];
 }
-declare function createHotUpdater<TContext = unknown>(options: CreateHotUpdaterOptions<TContext>): RuntimeHotUpdaterAPI<TContext>;
+declare function createHotUpdater(options: CreateHotUpdaterOptions): RuntimeHotUpdaterAPI;
 //#endregion
-export { CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater };
+export { ClientAccessPolicy, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater };

package/dist/createHotUpdaterCore.mjs

@@ -1,49 +1,71 @@
-import { createHandler } from "./handler.mjs";
-import { createPluginDatabaseCore } from "./db/pluginCore.mjs";
+import { createHotUpdaterHandlers } from "./handler.mjs";
+import { createInsightsProvider } from "./insights/bounded/provider.mjs";
+import { authenticateApiKey, createApiKeyManagement, normalizeApiKeyHeaderName } from "./apiKeys.mjs";
+import { createDatabasePluginCore } from "./db/databasePluginCore.mjs";
 import { createSchemaReadinessChecker } from "./db/schemaReadiness.mjs";
-import { isDatabasePlugin, isDatabasePluginFactory } from "./db/types.mjs";
-import { normalizeBasePath } from "./route.mjs";
+import { isDatabasePlugin } from "./db/types.mjs";
 import { createStorageAccess } from "./storageAccess.mjs";
-import { assertRuntimeStoragePlugin } from "@hot-updater/plugin-core";
+import { assertStorageOperations } from "@hot-updater/plugin-core";
 //#region src/createHotUpdaterCore.ts
+const normalizeClientAccess = (value) => {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new TypeError("clientAccess must be an object.");
+	const policy = value;
+	if (policy.type === "public") return { type: "public" };
+	if (policy.type === "api-key") return {
+		headerName: normalizeApiKeyHeaderName(policy.headerName),
+		type: "api-key"
+	};
+	throw new TypeError("clientAccess.type must be either \"public\" or \"api-key\".");
+};
 const hotUpdaterCoreMetadata = Symbol.for("@hot-updater/server/core-metadata");
 function getHotUpdaterCoreMetadata(hotUpdater) {
 	return hotUpdater[hotUpdaterCoreMetadata];
 }
 function createHotUpdaterCore(options) {
+	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
 	const database = options.database;
-	const basePath = normalizeBasePath(options.basePath ?? "/api");
-	const { readStorageText, resolveFileUrl } = createStorageAccess((options.storages ?? options.storagePlugins ?? []).map((plugin) => {
-		const storagePlugin = typeof plugin === "function" ? plugin() : plugin;
-		assertRuntimeStoragePlugin(storagePlugin);
-		return storagePlugin;
+	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess((options.storage ?? []).map((storage) => {
+		assertStorageOperations(storage, ["get", "getDownloadUrl"]);
+		return storage;
 	}));
-	if (!isDatabasePluginFactory(database) && !isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
 	const adapterCapabilities = database;
-	const plugin = isDatabasePluginFactory(database) ? database() : database;
+	if (!isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
+	const plugin = database;
 	const assertSchemaReady = createSchemaReadinessChecker(adapterCapabilities.adapterName ?? plugin.name, adapterCapabilities.createMigrator);
-	const core = createPluginDatabaseCore(() => plugin, resolveFileUrl, isDatabasePluginFactory(database) ? {
-		createMutationPlugin: () => database(),
-		beforeOperation: assertSchemaReady,
-		readStorageText
-	} : {
+	const core = createDatabasePluginCore(plugin, resolveFileUrl, {
 		beforeOperation: assertSchemaReady,
 		readStorageText
 	});
-	const internalHandler = createHandler(core.api, {
-		basePath,
-		routes: options.routes
+	const clientAccess = normalizeClientAccess(options.clientAccess);
+	const insights = createInsightsProvider({
+		async append(row) {
+			await assertSchemaReady();
+			return plugin.models.insights.append(row);
+		},
+		async scan(input) {
+			await assertSchemaReady();
+			return plugin.models.insights.scan(input);
+		}
 	});
-	const handler = (request, context, ...extraArgs) => {
-		if (extraArgs.length > 0) return internalHandler(request);
-		return internalHandler(request, context);
-	};
-	const api = {
-		basePath,
+	const apiKeys = createApiKeyManagement({
+		apiKeys: plugin.models.apiKeys,
+		beforeOperation: assertSchemaReady
+	});
+	const handlers = createHotUpdaterHandlers(core.api, insights, clientAccess.type === "api-key" ? {
+		authenticate: (request) => authenticateApiKey({
+			apiKeys: plugin.models.apiKeys,
+			beforeLookup: assertSchemaReady,
+			headerName: clientAccess.headerName,
+			request
+		}),
+		headerName: clientAccess.headerName
+	} : void 0, downloadStorageObject);
+	const api = Object.assign({
 		adapterName: adapterCapabilities.adapterName ?? core.adapterName,
-		handler
-	};
-	Object.defineProperties(api, Object.getOwnPropertyDescriptors(core.api));
+		insights,
+		apiKeys,
+		handlers
+	}, core.api);
 	Object.defineProperty(api, hotUpdaterCoreMetadata, {
 		enumerable: false,
 		value: {

package/dist/db/createBundleDiff.cjs

@@ -3,10 +3,6 @@ let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let _hot_updater_core = require("@hot-updater/core");
 let node_crypto = require("node:crypto");
 node_crypto = require_runtime.__toESM(node_crypto);
-let node_fs_promises = require("node:fs/promises");
-node_fs_promises = require_runtime.__toESM(node_fs_promises);
-let node_os = require("node:os");
-node_os = require_runtime.__toESM(node_os);
 let node_path = require("node:path");
 node_path = require_runtime.__toESM(node_path);
 let node_util = require("node:util");
@@ -14,7 +10,6 @@ let node_zlib = require("node:zlib");
 let _hot_updater_bsdiff = require("@hot-updater/bsdiff");
 //#region src/db/createBundleDiff.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
-const HOT_UPDATER_DOWNLOAD_DIR_PREFIX = "downloads-";
 const decompressBrotli = (0, node_util.promisify)(node_zlib.brotliDecompress);
 const isBundleManifest = (value) => {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
@@ -39,23 +34,14 @@ async function downloadFromUrl(url) {
 }
 async function downloadStorageBytes(storageUri, storagePlugin) {
 	const protocol = new URL(storageUri).protocol.replace(":", "");
-	if (protocol === "http" || protocol === "https") return downloadFromUrl(storageUri);
-	if (!storagePlugin) throw new Error("Storage plugin is not configured");
-	if (storagePlugin.supportedProtocol !== protocol) throw new Error(`No storage plugin for protocol: ${protocol}`);
-	const downloadRoot = node_path.default.join(process.cwd(), ".hot-updater");
-	await node_fs_promises.default.mkdir(downloadRoot, { recursive: true });
-	const workDir = await node_fs_promises.default.mkdtemp(node_path.default.join(downloadRoot, HOT_UPDATER_DOWNLOAD_DIR_PREFIX));
-	const filename = node_path.default.basename(new URL(storageUri).pathname) || (0, node_crypto.randomUUID)();
-	const filePath = node_path.default.join(workDir, filename);
-	try {
-		await storagePlugin.profiles.node.downloadFile(storageUri, filePath);
-		return new Uint8Array(await node_fs_promises.default.readFile(filePath));
-	} finally {
-		await node_fs_promises.default.rm(workDir, {
-			force: true,
-			recursive: true
-		});
+	if (!storagePlugin || storagePlugin.protocol !== protocol) {
+		if (protocol === "http" || protocol === "https") return downloadFromUrl(storageUri);
+		if (!storagePlugin) throw new Error("Storage plugin is not configured");
+		throw new Error(`No storage plugin for protocol: ${protocol}`);
 	}
+	const { response } = await storagePlugin.get({ storageUri });
+	if (response === null) throw new Error(`Storage object not found: ${storageUri}`);
+	return new Uint8Array(await response.arrayBuffer());
 }
 async function fetchManifest(bundle, storagePlugin) {
 	const manifestStorageUri = (0, _hot_updater_core.getManifestStorageUri)(bundle);
@@ -81,12 +67,16 @@ async function fetchAssetBytes(bundle, assetPath, manifest, storagePlugin) {
 		const compressedAssetStorageUri = (0, _hot_updater_plugin_core.resolveManifestAssetStorageUri)({
 			assetBaseStorageUri,
 			assetPath: downloadPath,
+			downloadFileHash: asset.downloadFileHash,
 			fileHash: asset.fileHash
 		});
 		let compressedBytes = null;
 		try {
 			compressedBytes = await downloadStorageBytes(compressedAssetStorageUri, storagePlugin);
-		} catch {}
+		} catch (error) {
+			if (!(error instanceof Error)) throw error;
+			compressedBytes = null;
+		}
 		if (compressedBytes) return new Uint8Array(await decompressBrotli(compressedBytes));
 	}
 	return downloadStorageBytes((0, _hot_updater_plugin_core.resolveManifestAssetStorageUri)({
@@ -95,23 +85,16 @@ async function fetchAssetBytes(bundle, assetPath, manifest, storagePlugin) {
 		fileHash: asset.fileHash
 	}), storagePlugin);
 }
-async function getFileHash(filePath) {
-	const file = await node_fs_promises.default.readFile(filePath);
-	return node_crypto.default.createHash("sha256").update(file).digest("hex");
-}
 function buildNextPatchState({ currentBundle, nextPatch, makePrimary }) {
 	const existingPatches = (0, _hot_updater_core.getBundlePatches)(currentBundle).filter((patch) => patch.baseBundleId !== nextPatch.baseBundleId);
-	const orderedPatches = makePrimary ? [nextPatch, ...existingPatches] : [...existingPatches, nextPatch];
-	return {
-		patches: orderedPatches,
-		primaryPatch: orderedPatches[0] ?? nextPatch
-	};
+	return makePrimary ? [nextPatch, ...existingPatches] : [...existingPatches, nextPatch];
 }
 async function createBundleDiff({ baseBundleId, bundleId }, deps, options = {}) {
+	const database = (0, _hot_updater_plugin_core.createDatabaseClient)(deps.databasePlugin);
 	if (!deps.storagePlugin) throw new Error("Storage plugin is not configured");
 	if (baseBundleId === bundleId) throw new Error("Base bundle must be different from the target bundle");
-	const baseBundle = await deps.databasePlugin.getBundleById(baseBundleId);
-	const targetBundle = await deps.databasePlugin.getBundleById(bundleId);
+	const baseBundle = await database.getBundleById(baseBundleId);
+	const targetBundle = await database.getBundleById(bundleId);
 	if (!baseBundle || !targetBundle) throw new Error("Bundle not found");
 	if (baseBundle.platform !== targetBundle.platform) throw new Error("Base bundle platform must match the target bundle");
 	if (baseBundle.id.localeCompare(targetBundle.id) >= 0) throw new Error("Base bundle must be older than the target bundle");
@@ -125,43 +108,37 @@ async function createBundleDiff({ baseBundleId, bundleId }, deps, options = {})
 	if (baseAssetHash === targetAssetHash) throw new Error("Hermes bundle is unchanged; no diff patch is required");
 	const [baseBytes, targetBytes] = await Promise.all([fetchAssetBytes(baseBundle, baseAssetPath, baseManifest, deps.storagePlugin), fetchAssetBytes(targetBundle, targetAssetPath, targetManifest, deps.storagePlugin)]);
 	const patchBytes = await (0, _hot_updater_bsdiff.hdiff)(baseBytes, targetBytes);
-	const workDir = await node_fs_promises.default.mkdtemp(node_path.default.join(node_os.default.tmpdir(), "hot-updater-console-bsdiff-"));
+	const patchFileHash = node_crypto.default.createHash("sha256").update(patchBytes).digest("hex");
 	const patchFilename = `${node_path.default.posix.basename(targetAssetPath)}.bsdiff`;
-	const patchPath = node_path.default.join(workDir, patchFilename);
 	const previousPatch = (0, _hot_updater_core.getBundlePatch)(targetBundle, baseBundle.id);
-	try {
-		await node_fs_promises.default.writeFile(patchPath, patchBytes);
-		const uploadKey = (0, _hot_updater_plugin_core.createBundleStorageKey)(targetBundle.id, "patches", baseBundle.id, getRelativeStorageDir(targetAssetPath));
-		const patchUpload = await deps.storagePlugin.profiles.node.upload(uploadKey, patchPath);
-		const patchFileHash = await getFileHash(patchPath);
-		const nextState = buildNextPatchState({
-			currentBundle: targetBundle,
-			nextPatch: {
-				baseBundleId: baseBundle.id,
-				baseFileHash: baseAssetHash,
-				patchFileHash,
-				patchStorageUri: patchUpload.storageUri
-			},
-			makePrimary: options.makePrimary ?? true
-		});
-		await deps.databasePlugin.updateBundle(targetBundle.id, {
-			patches: nextState.patches,
-			patchBaseBundleId: nextState.primaryPatch.baseBundleId,
-			patchBaseFileHash: nextState.primaryPatch.baseFileHash,
-			patchFileHash: nextState.primaryPatch.patchFileHash,
-			patchStorageUri: nextState.primaryPatch.patchStorageUri
-		});
-		await deps.databasePlugin.commitBundle();
-		if (previousPatch?.patchStorageUri && previousPatch.patchStorageUri !== patchUpload.storageUri) await deps.storagePlugin.profiles.node.delete(previousPatch.patchStorageUri).catch(() => {});
-		const updatedBundle = await deps.databasePlugin.getBundleById(targetBundle.id);
-		if (!updatedBundle) throw new Error("Updated bundle not found");
-		return updatedBundle;
-	} finally {
-		await node_fs_promises.default.rm(workDir, {
-			force: true,
-			recursive: true
-		});
-	}
+	const uploadKey = (0, _hot_updater_plugin_core.createBundleStorageKey)(targetBundle.id, "patches", baseBundle.id, patchFileHash, getRelativeStorageDir(targetAssetPath), patchFilename);
+	const patchUpload = await deps.storagePlugin.put({
+		key: uploadKey,
+		body: new ReadableStream({ start(controller) {
+			controller.enqueue(patchBytes);
+			controller.close();
+		} }),
+		contentLength: patchBytes.byteLength,
+		contentType: "application/octet-stream"
+	});
+	const patches = buildNextPatchState({
+		currentBundle: targetBundle,
+		nextPatch: {
+			baseBundleId: baseBundle.id,
+			baseFileHash: baseAssetHash,
+			byteSize: patchBytes.byteLength,
+			patchFileHash,
+			patchStorageUri: patchUpload.storageUri
+		},
+		makePrimary: options.makePrimary ?? true
+	});
+	const updatedBundle = {
+		...targetBundle,
+		patches
+	};
+	await database.updateBundleById(targetBundle.id, updatedBundle);
+	if (previousPatch?.patchStorageUri && previousPatch.patchStorageUri !== patchUpload.storageUri) await deps.storagePlugin.delete({ storageUri: previousPatch.patchStorageUri }).catch(() => {});
+	return updatedBundle;
 }
 //#endregion
 exports.createBundleDiff = createBundleDiff;