@hot-updater/supabase 1.0.0-rc.16 → 1.0.0-rc.18

package/dist/edge.d.cts

@@ -1,4 +1,4 @@
-import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-CGDLVEvG.cjs";
+import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-C0-IshLi.cjs";
 import { StoragePluginWith } from "@hot-updater/plugin-core";
 //#region src/supabaseEdgeFunctionStorage.d.ts
 interface SupabaseEdgeFunctionStorageConfig {

package/dist/edge.d.mts

@@ -1,4 +1,4 @@
-import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-CGDLVEvG.mjs";
+import { i as plugins, n as supabaseDatabase, t as SupabaseDatabaseConfig } from "./supabaseDatabase-C0-IshLi.mjs";
 import { StoragePluginWith } from "@hot-updater/plugin-core";
 //#region src/supabaseEdgeFunctionStorage.d.ts
 interface SupabaseEdgeFunctionStorageConfig {

package/dist/iac/index.cjs

@@ -7085,35 +7085,12 @@ const assertSkippedConfigDoesNotUseLegacySupabaseKey = async (configWriteResult)
 	_hot_updater_cli_tools.p.log.message("Update it to use 'supabaseServiceRoleKey' with 'HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY', then run init again.");
 	process.exit(1);
 };
-const SOURCE_TEMPLATE = `// add this to your App.tsx
-import { HotUpdater } from "@hot-updater/react-native";
-
-function App() {
-  return null; // Replace with your app root
-}
-
-HotUpdater.init({
-  baseURL: "%%source%%",
-  requestHeaders: {
-    "x-api-key": %%apiKey%%,
-  },
-});
-
-// Call HotUpdater.checkForUpdate({ updateStrategy: "appVersion" })
-// when your app is ready to check.
-export default App;`;
-const getSupabaseReactNativeSource = ({ apiKey, functionName, projectId }) => (0, _hot_updater_cli_tools.transformTemplate)(SOURCE_TEMPLATE, {
-	apiKey: JSON.stringify(apiKey),
-	source: `https://${projectId}.supabase.co/functions/v1/${functionName}`
-});
+/** The Edge Function URL an app sets as its baseURL. */
+const getSupabaseFunctionUrl = ({ functionName, projectId }) => `https://${projectId}.supabase.co/functions/v1/${functionName}`;
 const reportSupabaseOriginCatalogReady = () => {
 	_hot_updater_cli_tools.p.log.success("Release catalog endpoint is ready in origin-only mode.");
 	_hot_updater_cli_tools.p.log.info("Catalog checks still invoke the Supabase Edge Function.");
 };
-const reportSupabaseApiKey = (apiKey) => {
-	_hot_updater_cli_tools.p.note(apiKey, "API Key");
-	_hot_updater_cli_tools.p.log.message("Store this API key separately in a secure place.");
-};
 const resolvePackageExportPath = async (packageName, exportName) => {
 	const packageJsonPath = require$1.resolve(`${packageName}/package.json`);
 	const exportTarget = JSON.parse(await fs_promises.default.readFile(packageJsonPath, "utf-8")).exports?.[exportName];
@@ -7656,13 +7633,13 @@ const runInitWithoutCliMetadata = async ({ build, envFile }) => {
 		supabaseServiceRoleKey: projectAccess.serviceRoleApiKey,
 		supabaseUrl: `https://${project.id}.supabase.co`
 	});
-	let apiKey;
+	let credential;
 	try {
-		apiKey = (await (0, _hot_updater_server_db.createDatabasePluginApis)(databasePlugin, plugins).apiKeys.provision({
-			existingApiKey: initInputEnv.HOT_UPDATER_API_KEY,
+		credential = await (0, _hot_updater_server_db.provisionClientCredential)(databasePlugin, plugins, {
+			env: initInputEnv,
 			name: "Supabase init"
-		})).apiKey;
-		await (0, _hot_updater_cli_tools.makeEnv)({ HOT_UPDATER_API_KEY: apiKey });
+		});
+		if (credential !== void 0) await (0, _hot_updater_cli_tools.makeEnv)({ [credential.env]: credential.value });
 	} finally {
 		await databasePlugin.dispose?.();
 	}
@@ -7675,12 +7652,14 @@ const runInitWithoutCliMetadata = async ({ build, envFile }) => {
 	else if (configWriteResult.status === "merged") _hot_updater_cli_tools.p.log.success("Updated 'hot-updater.config.ts' file with Supabase settings.");
 	else _hot_updater_cli_tools.p.log.warn(`Kept existing 'hot-updater.config.ts' unchanged: ${configWriteResult.reason}`);
 	await (0, _hot_updater_cli_tools.generateHotUpdaterPlugins)("@hot-updater/supabase");
-	_hot_updater_cli_tools.p.note(getSupabaseReactNativeSource({
-		apiKey,
-		functionName,
-		projectId: project.id
-	}));
-	reportSupabaseApiKey(apiKey);
+	(0, _hot_updater_cli_tools.printAppSetup)({
+		baseURL: getSupabaseFunctionUrl({
+			functionName,
+			projectId: project.id
+		}),
+		...credential === void 0 ? {} : { credential },
+		clientPlugins: (0, _hot_updater_server_db.clientPluginsOf)(plugins)
+	});
 	reportSupabaseOriginCatalogReady();
 	_hot_updater_cli_tools.p.log.message(`Next step: ${(0, _hot_updater_cli_tools.link)("https://hot-updater.dev/docs/managed/supabase#step-4-add-hotupdater-to-your-project")}`);
 	_hot_updater_cli_tools.p.log.success("Done! 🎉");
@@ -7689,9 +7668,8 @@ const runInit = (options) => withSupabaseCliMetadataCleanup(process.cwd(), () =>
 //#endregion
 exports.createSelectedBucket = createSelectedBucket;
 exports.getLegacySupabaseConfigReference = getLegacySupabaseConfigReference;
+exports.getSupabaseFunctionUrl = getSupabaseFunctionUrl;
 exports.getSupabaseProjectAccess = getSupabaseProjectAccess;
-exports.getSupabaseReactNativeSource = getSupabaseReactNativeSource;
-exports.reportSupabaseApiKey = reportSupabaseApiKey;
 exports.reportSupabaseOriginCatalogReady = reportSupabaseOriginCatalogReady;
 exports.resolveEdgeFunctionDenoConfig = resolveEdgeFunctionDenoConfig;
 exports.runInit = runInit;

package/dist/iac/index.d.cts

@@ -45,13 +45,12 @@ interface SupabaseManagementApi {
 //#endregion
 //#region iac/index.d.ts
 declare const getLegacySupabaseConfigReference: (configText: string) => "HOT_UPDATER_SUPABASE_ANON_KEY" | "supabaseAnonKey" | null;
-declare const getSupabaseReactNativeSource: ({ apiKey, functionName, projectId }: {
-  readonly apiKey: string;
+/** The Edge Function URL an app sets as its baseURL. */
+declare const getSupabaseFunctionUrl: ({ functionName, projectId }: {
   readonly functionName: string;
   readonly projectId: string;
 }) => string;
 declare const reportSupabaseOriginCatalogReady: () => void;
-declare const reportSupabaseApiKey: (apiKey: string) => void;
 declare const resolveEdgeFunctionDenoConfig: (targetDir: string) => Promise<{
   imports: Record<string, string>;
 }>;
@@ -99,4 +98,4 @@ declare const getSupabaseProjectAccess: ({ accessToken, managementApi, project,
 declare const withSupabaseCliMetadataCleanup: <Result>(cwd: string, operation: () => Promise<Result>) => Promise<Result>;
 declare const runInit: (options: RunInitOptions) => Promise<void>;
 //#endregion
-export { SupabaseBucketSelection, SupabaseProjectSelection, createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseProjectAccess, getSupabaseReactNativeSource, reportSupabaseApiKey, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };
+export { SupabaseBucketSelection, SupabaseProjectSelection, createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseFunctionUrl, getSupabaseProjectAccess, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };

package/dist/iac/index.d.mts

@@ -45,13 +45,12 @@ interface SupabaseManagementApi {
 //#endregion
 //#region iac/index.d.ts
 declare const getLegacySupabaseConfigReference: (configText: string) => "HOT_UPDATER_SUPABASE_ANON_KEY" | "supabaseAnonKey" | null;
-declare const getSupabaseReactNativeSource: ({ apiKey, functionName, projectId }: {
-  readonly apiKey: string;
+/** The Edge Function URL an app sets as its baseURL. */
+declare const getSupabaseFunctionUrl: ({ functionName, projectId }: {
   readonly functionName: string;
   readonly projectId: string;
 }) => string;
 declare const reportSupabaseOriginCatalogReady: () => void;
-declare const reportSupabaseApiKey: (apiKey: string) => void;
 declare const resolveEdgeFunctionDenoConfig: (targetDir: string) => Promise<{
   imports: Record<string, string>;
 }>;
@@ -99,4 +98,4 @@ declare const getSupabaseProjectAccess: ({ accessToken, managementApi, project,
 declare const withSupabaseCliMetadataCleanup: <Result>(cwd: string, operation: () => Promise<Result>) => Promise<Result>;
 declare const runInit: (options: RunInitOptions) => Promise<void>;
 //#endregion
-export { SupabaseBucketSelection, SupabaseProjectSelection, createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseProjectAccess, getSupabaseReactNativeSource, reportSupabaseApiKey, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };
+export { SupabaseBucketSelection, SupabaseProjectSelection, createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseFunctionUrl, getSupabaseProjectAccess, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };

package/dist/iac/index.mjs

@@ -1,8 +1,8 @@
 import { createRequire } from "node:module";
 import fs from "fs/promises";
 import path from "path";
-import { ConfigBuilder, InitError, MissingInitInputsError, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, generateHotUpdaterPlugins, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, p, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, transformEnv, transformTemplate, writeHotUpdaterConfig } from "@hot-updater/cli-tools";
-import { createDatabasePluginApis } from "@hot-updater/server/db";
+import { ConfigBuilder, InitError, MissingInitInputsError, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, generateHotUpdaterPlugins, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, p, printAppSetup, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, transformEnv, transformTemplate, writeHotUpdaterConfig } from "@hot-updater/cli-tools";
+import { clientPluginsOf, provisionClientCredential } from "@hot-updater/server/db";
 import { fileURLToPath } from "node:url";
 import { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
@@ -7080,35 +7080,12 @@ const assertSkippedConfigDoesNotUseLegacySupabaseKey = async (configWriteResult)
 	p.log.message("Update it to use 'supabaseServiceRoleKey' with 'HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY', then run init again.");
 	process.exit(1);
 };
-const SOURCE_TEMPLATE = `// add this to your App.tsx
-import { HotUpdater } from "@hot-updater/react-native";
-
-function App() {
-  return null; // Replace with your app root
-}
-
-HotUpdater.init({
-  baseURL: "%%source%%",
-  requestHeaders: {
-    "x-api-key": %%apiKey%%,
-  },
-});
-
-// Call HotUpdater.checkForUpdate({ updateStrategy: "appVersion" })
-// when your app is ready to check.
-export default App;`;
-const getSupabaseReactNativeSource = ({ apiKey, functionName, projectId }) => transformTemplate(SOURCE_TEMPLATE, {
-	apiKey: JSON.stringify(apiKey),
-	source: `https://${projectId}.supabase.co/functions/v1/${functionName}`
-});
+/** The Edge Function URL an app sets as its baseURL. */
+const getSupabaseFunctionUrl = ({ functionName, projectId }) => `https://${projectId}.supabase.co/functions/v1/${functionName}`;
 const reportSupabaseOriginCatalogReady = () => {
 	p.log.success("Release catalog endpoint is ready in origin-only mode.");
 	p.log.info("Catalog checks still invoke the Supabase Edge Function.");
 };
-const reportSupabaseApiKey = (apiKey) => {
-	p.note(apiKey, "API Key");
-	p.log.message("Store this API key separately in a secure place.");
-};
 const resolvePackageExportPath = async (packageName, exportName) => {
 	const packageJsonPath = require$1.resolve(`${packageName}/package.json`);
 	const exportTarget = JSON.parse(await fs.readFile(packageJsonPath, "utf-8")).exports?.[exportName];
@@ -7651,13 +7628,13 @@ const runInitWithoutCliMetadata = async ({ build, envFile }) => {
 		supabaseServiceRoleKey: projectAccess.serviceRoleApiKey,
 		supabaseUrl: `https://${project.id}.supabase.co`
 	});
-	let apiKey;
+	let credential;
 	try {
-		apiKey = (await createDatabasePluginApis(databasePlugin, plugins).apiKeys.provision({
-			existingApiKey: initInputEnv.HOT_UPDATER_API_KEY,
+		credential = await provisionClientCredential(databasePlugin, plugins, {
+			env: initInputEnv,
 			name: "Supabase init"
-		})).apiKey;
-		await makeEnv({ HOT_UPDATER_API_KEY: apiKey });
+		});
+		if (credential !== void 0) await makeEnv({ [credential.env]: credential.value });
 	} finally {
 		await databasePlugin.dispose?.();
 	}
@@ -7670,16 +7647,18 @@ const runInitWithoutCliMetadata = async ({ build, envFile }) => {
 	else if (configWriteResult.status === "merged") p.log.success("Updated 'hot-updater.config.ts' file with Supabase settings.");
 	else p.log.warn(`Kept existing 'hot-updater.config.ts' unchanged: ${configWriteResult.reason}`);
 	await generateHotUpdaterPlugins("@hot-updater/supabase");
-	p.note(getSupabaseReactNativeSource({
-		apiKey,
-		functionName,
-		projectId: project.id
-	}));
-	reportSupabaseApiKey(apiKey);
+	printAppSetup({
+		baseURL: getSupabaseFunctionUrl({
+			functionName,
+			projectId: project.id
+		}),
+		...credential === void 0 ? {} : { credential },
+		clientPlugins: clientPluginsOf(plugins)
+	});
 	reportSupabaseOriginCatalogReady();
 	p.log.message(`Next step: ${link("https://hot-updater.dev/docs/managed/supabase#step-4-add-hotupdater-to-your-project")}`);
 	p.log.success("Done! 🎉");
 };
 const runInit = (options) => withSupabaseCliMetadataCleanup(process.cwd(), () => runInitWithoutCliMetadata(options));
 //#endregion
-export { createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseProjectAccess, getSupabaseReactNativeSource, reportSupabaseApiKey, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };
+export { createSelectedBucket, getLegacySupabaseConfigReference, getSupabaseFunctionUrl, getSupabaseProjectAccess, reportSupabaseOriginCatalogReady, resolveEdgeFunctionDenoConfig, runInit, selectBucket, selectProject, waitForSupabaseProjectReady, waitForSupabaseSchemaReady, withSupabaseCliMetadataCleanup };

package/dist/index.cjs

@@ -4,7 +4,7 @@ let _hot_updater_server_database = require("@hot-updater/server/database");
 let _hot_updater_server_db = require("@hot-updater/server/db");
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */
-const supabaseTableNames = (schema = _hot_updater_server_database.builtInTarget.schema) => [
+const supabaseTableNames = (schema = _hot_updater_server_database.coreTarget.schema) => [
 	...schema.tables.flatMap((table) => [table.name, ...table.indexes.filter((index) => (0, _hot_updater_server_database.isMultiIndex)(table, index)).map((index) => `${table.name}__${index.name}`)]),
 	_hot_updater_server_database.SETTINGS_TABLE.name,
 	_hot_updater_server_database.WRITE_GUARD_TABLE.name
@@ -102,9 +102,9 @@ $apply$`;
 * write guard, row-level security on every table (no policy, so only the
 * service role reads or writes), the apply RPC for the service role alone,
 * and the settings rows last. Every statement can run again, so a migration
-* for a server's plugin tables repeats the built-in ones.
+* for a server's plugin tables repeats core's.
 */
-const supabaseSchemaStatements = ({ schema, settings: expected } = _hot_updater_server_database.builtInTarget) => {
+const supabaseSchemaStatements = ({ schema, settings: expected } = _hot_updater_server_database.coreTarget) => {
 	const engine = (0, _hot_updater_server_db.generateEngineSql)("postgresql", schema, expected, { tablePrefix: require_plugins.SUPABASE_TABLE_PREFIX });
 	const settings = engine.slice(-Object.keys(expected).length);
 	const tables = supabaseTableNames(schema);
@@ -124,14 +124,14 @@ const supabaseSchemaSql = (target) => `-- HotUpdater.schema\n\n${supabaseSchemaS
 //#region src/supabaseMigration.ts
 /**
 * Hot Updater's database on Supabase, with the migration `hot-updater db
-* generate` writes to `supabase/migrations`: the built-in tables, the
-* server's plugin tables, the apply RPC that may name them, and their
-* settings rows. `supabase db push` applies it.
+* generate` writes to `supabase/migrations`: core's tables, the server's
+* plugin tables, the apply RPC that may name them, and their settings rows.
+* `supabase db push` applies it.
 */
 const supabaseDatabase = (config) => ({
 	...require_plugins.supabaseDatabase(config),
-	generateSchema: ((version, _name, target = _hot_updater_server_database.builtInTarget) => {
-		if (version !== "latest" && version !== _hot_updater_server_database.builtInSettings["schema.core"]) throw new Error(`Invalid version ${version}`);
+	generateSchema: ((version, _name, target = _hot_updater_server_database.coreTarget) => {
+		if (version !== "latest" && version !== _hot_updater_server_database.coreSettings["schema.core"]) throw new Error(`Invalid version ${version}`);
 		const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
 		return {
 			code: supabaseSchemaSql(target),

package/dist/index.d.cts

@@ -1,12 +1,12 @@
-import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-CGDLVEvG.cjs";
+import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-C0-IshLi.cjs";
 import { StoragePluginWith } from "@hot-updater/plugin-core";
 import { ToolingDatabase } from "@hot-updater/server/db";
 //#region src/supabaseMigration.d.ts
 /**
  * Hot Updater's database on Supabase, with the migration `hot-updater db
- * generate` writes to `supabase/migrations`: the built-in tables, the
- * server's plugin tables, the apply RPC that may name them, and their
- * settings rows. `supabase db push` applies it.
+ * generate` writes to `supabase/migrations`: core's tables, the server's
+ * plugin tables, the apply RPC that may name them, and their settings rows.
+ * `supabase db push` applies it.
  */
 declare const supabaseDatabase: (config: SupabaseDatabaseConfig) => ToolingDatabase;
 //#endregion

package/dist/index.d.mts

@@ -1,12 +1,12 @@
-import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-CGDLVEvG.mjs";
+import { i as plugins, r as SupabaseServiceRoleConfig, t as SupabaseDatabaseConfig } from "./supabaseDatabase-C0-IshLi.mjs";
 import { ToolingDatabase } from "@hot-updater/server/db";
 import { StoragePluginWith } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**
  * Hot Updater's database on Supabase, with the migration `hot-updater db
- * generate` writes to `supabase/migrations`: the built-in tables, the
- * server's plugin tables, the apply RPC that may name them, and their
- * settings rows. `supabase db push` applies it.
+ * generate` writes to `supabase/migrations`: core's tables, the server's
+ * plugin tables, the apply RPC that may name them, and their settings rows.
+ * `supabase db push` applies it.
  */
 declare const supabaseDatabase: (config: SupabaseDatabaseConfig) => ToolingDatabase;
 //#endregion

package/dist/index.mjs

@@ -1,9 +1,9 @@
 import { a as SUPABASE_TABLE_PREFIX, i as SUPABASE_APPLY_FUNCTION, n as supabaseStorage, r as supabaseDatabase$1, t as plugins } from "./plugins--10vxSpf.mjs";
-import { SETTINGS_TABLE, WRITE_GUARD_TABLE, builtInSettings, builtInTarget, createTableStatements, isMultiIndex } from "@hot-updater/server/database";
+import { SETTINGS_TABLE, WRITE_GUARD_TABLE, coreSettings, coreTarget, createTableStatements, isMultiIndex } from "@hot-updater/server/database";
 import { generateEngineSql } from "@hot-updater/server/db";
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */
-const supabaseTableNames = (schema = builtInTarget.schema) => [
+const supabaseTableNames = (schema = coreTarget.schema) => [
 	...schema.tables.flatMap((table) => [table.name, ...table.indexes.filter((index) => isMultiIndex(table, index)).map((index) => `${table.name}__${index.name}`)]),
 	SETTINGS_TABLE.name,
 	WRITE_GUARD_TABLE.name
@@ -101,9 +101,9 @@ $apply$`;
 * write guard, row-level security on every table (no policy, so only the
 * service role reads or writes), the apply RPC for the service role alone,
 * and the settings rows last. Every statement can run again, so a migration
-* for a server's plugin tables repeats the built-in ones.
+* for a server's plugin tables repeats core's.
 */
-const supabaseSchemaStatements = ({ schema, settings: expected } = builtInTarget) => {
+const supabaseSchemaStatements = ({ schema, settings: expected } = coreTarget) => {
 	const engine = generateEngineSql("postgresql", schema, expected, { tablePrefix: SUPABASE_TABLE_PREFIX });
 	const settings = engine.slice(-Object.keys(expected).length);
 	const tables = supabaseTableNames(schema);
@@ -123,14 +123,14 @@ const supabaseSchemaSql = (target) => `-- HotUpdater.schema\n\n${supabaseSchemaS
 //#region src/supabaseMigration.ts
 /**
 * Hot Updater's database on Supabase, with the migration `hot-updater db
-* generate` writes to `supabase/migrations`: the built-in tables, the
-* server's plugin tables, the apply RPC that may name them, and their
-* settings rows. `supabase db push` applies it.
+* generate` writes to `supabase/migrations`: core's tables, the server's
+* plugin tables, the apply RPC that may name them, and their settings rows.
+* `supabase db push` applies it.
 */
 const supabaseDatabase = (config) => ({
 	...supabaseDatabase$1(config),
-	generateSchema: ((version, _name, target = builtInTarget) => {
-		if (version !== "latest" && version !== builtInSettings["schema.core"]) throw new Error(`Invalid version ${version}`);
+	generateSchema: ((version, _name, target = coreTarget) => {
+		if (version !== "latest" && version !== coreSettings["schema.core"]) throw new Error(`Invalid version ${version}`);
 		const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/\D/g, "").slice(0, 14);
 		return {
 			code: supabaseSchemaSql(target),

package/dist/{supabaseDatabase-CGDLVEvG.d.cts → supabaseDatabase-C0-IshLi.d.cts}

@@ -133,12 +133,7 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
     readonly received_at_ms: {
       readonly type: "integer";
     };
-    readonly current_release_id: {
-      readonly type: "string";
-      readonly maxLength: 36;
-      readonly required: false;
-    };
-  }, {}, {
+  }, Readonly<Record<string, import("@hot-updater/server/database").FieldType>>, {
     readonly byUser: {
       readonly eq: readonly ["user_id"];
       readonly sort: readonly ["install_id"];
@@ -152,7 +147,7 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
     readonly bucket_start_ms: {
       readonly type: "integer";
     };
-  }, "downloads" | "launches" | "failed_launches", {
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
     readonly window: {
       readonly eq: readonly ["identity"];
       readonly sort: readonly ["bucket_start_ms"];
@@ -171,7 +166,63 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly eq: readonly ["identity"];
       readonly sort: readonly ["bucket_start_ms"];
     };
-  }, "launch_users" | "activity_users", readonly ["identity", "bucket_start_ms"]>;
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_daily: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_daily: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_lifetime: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_lifetime: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "failed_users", readonly ["identity", "bucket_start_ms"]>;
   readonly insights_distribution: import("@hot-updater/server/database").AggregateDefinition<{
     readonly channel: {
       readonly type: "string";
@@ -254,22 +305,52 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly sort: readonly ["bucket_start_ms"];
     };
   }, never, readonly ["platform", "channel", "type", "bundle_ref", "bucket_start_ms"]>;
+  readonly insights_failures: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+    readonly release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly stage: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly reason: {
+      readonly type: "string";
+      readonly maxLength: 64;
+    };
+    readonly detail: {
+      readonly type: "string";
+      readonly maxLength: 160;
+    };
+  }, "events", {
+    readonly byScope: {
+      readonly eq: readonly ["platform", "channel"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["platform", "channel", "bucket_start_ms", "release_id", "stage", "reason", "detail"]>;
 }, {
   api: {
-    recordEvent: (event: import("@hot-updater/plugin-core").BundleEventRow) => Promise<void>;
-    listEvents: (input: import("@hot-updater/plugin-core").InsightsListEventsInput) => Promise<readonly import("@hot-updater/plugin-core").BundleEventRow[]>;
-    findLatestEvents: (input: import("@hot-updater/plugin-core").InsightsFindLatestEventsInput) => Promise<readonly import("@hot-updater/plugin-core").BundleEventRow[]>;
-    countLatestEvents: (input: import("@hot-updater/plugin-core").InsightsCountLatestEventsInput) => Promise<number>;
-    countEvents: (input: import("@hot-updater/plugin-core").InsightsCountEventsInput) => Promise<number>;
-    getReleaseActivity: (input: import("@hot-updater/plugin-core").InsightsGetReleaseActivityInput) => Promise<import("@hot-updater/plugin-core").InsightsGetReleaseActivityResult>;
-    getAppUsage: (input: import("@hot-updater/plugin-core").InsightsGetAppUsageInput) => Promise<import("@hot-updater/plugin-core").InsightsGetAppUsageResult>;
+    retention: import("@hot-updater/server/plugins/insights").InsightsRetention;
+    recordEvent: (event: import("@hot-updater/server/plugins/insights").BundleEventRow) => Promise<void>;
+    listEvents: (input: import("@hot-updater/server/plugins/insights").InsightsListEventsInput) => Promise<readonly import("@hot-updater/server/plugins/insights").BundleEventRow[]>;
+    findLatestEvents: (input: import("@hot-updater/server/plugins/insights").InsightsFindLatestEventsInput) => Promise<readonly import("@hot-updater/server/plugins/insights").BundleEventRow[]>;
+    countLatestEvents: (input: import("@hot-updater/server/plugins/insights").InsightsCountLatestEventsInput) => Promise<number>;
+    countEvents: (input: import("@hot-updater/server/plugins/insights").InsightsCountEventsInput) => Promise<number>;
+    getReleaseActivity: (input: import("@hot-updater/server/plugins/insights").InsightsGetReleaseActivityInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsGetReleaseActivityResult>;
+    getAppUsage: (input: import("@hot-updater/server/plugins/insights").InsightsGetAppUsageInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsGetAppUsageResult>;
+    getUpdateFailures: (input: import("@hot-updater/server/plugins/insights").InsightsUpdateFailuresInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsUpdateFailures>;
   };
-  endpoints: {
-    access: "client" | "admin";
-    method: "POST" | "GET";
-    path: "/events" | "/overview" | "/installations" | "/installations/:installId/events" | "/installations/:installId";
-    handler: (request: Request, params: Readonly<Record<string, string>>) => Promise<Response>;
-  }[];
+  endpoints: import("@hot-updater/server/plugins").PluginEndpoint[];
 }, {}>, import("@hot-updater/server/plugins").HotUpdaterPlugin<"apiKeys", {
   readonly api_keys: import("@hot-updater/server/database").TableDefinition<{
     readonly id: {
@@ -312,21 +393,21 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly apiKey: string;
       readonly name: string;
       readonly createdAtMs?: number;
-    }) => Promise<import("@hot-updater/server").CreatedApiKey>;
+    }) => Promise<import("@hot-updater/server/plugins/api-keys").CreatedApiKey>;
     provision: (input: {
       readonly existingApiKey?: string;
       readonly name: string;
-    }) => Promise<import("@hot-updater/server").CreatedApiKey>;
+    }) => Promise<import("@hot-updater/server/plugins/api-keys").CreatedApiKey>;
     create(input: {
       readonly name: string;
     }): Promise<{
       readonly apiKey: string;
-      readonly record: import("@hot-updater/server").ApiKeyMetadata;
+      readonly record: import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata;
     }>;
-    list(): Promise<readonly import("@hot-updater/server").ApiKeyMetadata[]>;
+    list(): Promise<readonly import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata[]>;
     revoke(input: {
       readonly id: string;
-    }): Promise<import("@hot-updater/server").ApiKeyMetadata | null>;
+    }): Promise<import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata | null>;
   };
   clientAuth: {
     varyHeaders: string[];

package/dist/{supabaseDatabase-CGDLVEvG.d.mts → supabaseDatabase-C0-IshLi.d.mts}

@@ -133,12 +133,7 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
     readonly received_at_ms: {
       readonly type: "integer";
     };
-    readonly current_release_id: {
-      readonly type: "string";
-      readonly maxLength: 36;
-      readonly required: false;
-    };
-  }, {}, {
+  }, Readonly<Record<string, import("@hot-updater/server/database").FieldType>>, {
     readonly byUser: {
       readonly eq: readonly ["user_id"];
       readonly sort: readonly ["install_id"];
@@ -152,7 +147,7 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
     readonly bucket_start_ms: {
       readonly type: "integer";
     };
-  }, "downloads" | "launches" | "failed_launches", {
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
     readonly window: {
       readonly eq: readonly ["identity"];
       readonly sort: readonly ["bucket_start_ms"];
@@ -171,7 +166,63 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly eq: readonly ["identity"];
       readonly sort: readonly ["bucket_start_ms"];
     };
-  }, "launch_users" | "activity_users", readonly ["identity", "bucket_start_ms"]>;
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_daily: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_daily: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "launch_users" | "activity_users" | "failed_users", readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_overview_lifetime: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, "downloads" | "launches" | "failed_launches" | "failed_updates" | "patch_downloads" | "patch_fallbacks", {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["identity", "bucket_start_ms"]>;
+  readonly insights_sketches_lifetime: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly identity: {
+      readonly type: "string";
+      readonly maxLength: 32;
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+  }, never, {
+    readonly window: {
+      readonly eq: readonly ["identity"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, "failed_users", readonly ["identity", "bucket_start_ms"]>;
   readonly insights_distribution: import("@hot-updater/server/database").AggregateDefinition<{
     readonly channel: {
       readonly type: "string";
@@ -254,22 +305,52 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly sort: readonly ["bucket_start_ms"];
     };
   }, never, readonly ["platform", "channel", "type", "bundle_ref", "bucket_start_ms"]>;
+  readonly insights_failures: import("@hot-updater/server/database").AggregateDefinition<{
+    readonly platform: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly channel: {
+      readonly type: "string";
+    };
+    readonly bucket_start_ms: {
+      readonly type: "integer";
+    };
+    readonly release_id: {
+      readonly type: "string";
+      readonly maxLength: 36;
+    };
+    readonly stage: {
+      readonly type: "string";
+      readonly maxLength: 16;
+    };
+    readonly reason: {
+      readonly type: "string";
+      readonly maxLength: 64;
+    };
+    readonly detail: {
+      readonly type: "string";
+      readonly maxLength: 160;
+    };
+  }, "events", {
+    readonly byScope: {
+      readonly eq: readonly ["platform", "channel"];
+      readonly sort: readonly ["bucket_start_ms"];
+    };
+  }, never, readonly ["platform", "channel", "bucket_start_ms", "release_id", "stage", "reason", "detail"]>;
 }, {
   api: {
-    recordEvent: (event: import("@hot-updater/plugin-core").BundleEventRow) => Promise<void>;
-    listEvents: (input: import("@hot-updater/plugin-core").InsightsListEventsInput) => Promise<readonly import("@hot-updater/plugin-core").BundleEventRow[]>;
-    findLatestEvents: (input: import("@hot-updater/plugin-core").InsightsFindLatestEventsInput) => Promise<readonly import("@hot-updater/plugin-core").BundleEventRow[]>;
-    countLatestEvents: (input: import("@hot-updater/plugin-core").InsightsCountLatestEventsInput) => Promise<number>;
-    countEvents: (input: import("@hot-updater/plugin-core").InsightsCountEventsInput) => Promise<number>;
-    getReleaseActivity: (input: import("@hot-updater/plugin-core").InsightsGetReleaseActivityInput) => Promise<import("@hot-updater/plugin-core").InsightsGetReleaseActivityResult>;
-    getAppUsage: (input: import("@hot-updater/plugin-core").InsightsGetAppUsageInput) => Promise<import("@hot-updater/plugin-core").InsightsGetAppUsageResult>;
+    retention: import("@hot-updater/server/plugins/insights").InsightsRetention;
+    recordEvent: (event: import("@hot-updater/server/plugins/insights").BundleEventRow) => Promise<void>;
+    listEvents: (input: import("@hot-updater/server/plugins/insights").InsightsListEventsInput) => Promise<readonly import("@hot-updater/server/plugins/insights").BundleEventRow[]>;
+    findLatestEvents: (input: import("@hot-updater/server/plugins/insights").InsightsFindLatestEventsInput) => Promise<readonly import("@hot-updater/server/plugins/insights").BundleEventRow[]>;
+    countLatestEvents: (input: import("@hot-updater/server/plugins/insights").InsightsCountLatestEventsInput) => Promise<number>;
+    countEvents: (input: import("@hot-updater/server/plugins/insights").InsightsCountEventsInput) => Promise<number>;
+    getReleaseActivity: (input: import("@hot-updater/server/plugins/insights").InsightsGetReleaseActivityInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsGetReleaseActivityResult>;
+    getAppUsage: (input: import("@hot-updater/server/plugins/insights").InsightsGetAppUsageInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsGetAppUsageResult>;
+    getUpdateFailures: (input: import("@hot-updater/server/plugins/insights").InsightsUpdateFailuresInput) => Promise<import("@hot-updater/server/plugins/insights").InsightsUpdateFailures>;
   };
-  endpoints: {
-    access: "client" | "admin";
-    method: "POST" | "GET";
-    path: "/events" | "/overview" | "/installations" | "/installations/:installId/events" | "/installations/:installId";
-    handler: (request: Request, params: Readonly<Record<string, string>>) => Promise<Response>;
-  }[];
+  endpoints: import("@hot-updater/server/plugins").PluginEndpoint[];
 }, {}>, import("@hot-updater/server/plugins").HotUpdaterPlugin<"apiKeys", {
   readonly api_keys: import("@hot-updater/server/database").TableDefinition<{
     readonly id: {
@@ -312,21 +393,21 @@ declare const plugins: readonly [import("@hot-updater/server/plugins").HotUpdate
       readonly apiKey: string;
       readonly name: string;
       readonly createdAtMs?: number;
-    }) => Promise<import("@hot-updater/server").CreatedApiKey>;
+    }) => Promise<import("@hot-updater/server/plugins/api-keys").CreatedApiKey>;
     provision: (input: {
       readonly existingApiKey?: string;
       readonly name: string;
-    }) => Promise<import("@hot-updater/server").CreatedApiKey>;
+    }) => Promise<import("@hot-updater/server/plugins/api-keys").CreatedApiKey>;
     create(input: {
       readonly name: string;
     }): Promise<{
       readonly apiKey: string;
-      readonly record: import("@hot-updater/server").ApiKeyMetadata;
+      readonly record: import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata;
     }>;
-    list(): Promise<readonly import("@hot-updater/server").ApiKeyMetadata[]>;
+    list(): Promise<readonly import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata[]>;
     revoke(input: {
       readonly id: string;
-    }): Promise<import("@hot-updater/server").ApiKeyMetadata | null>;
+    }): Promise<import("@hot-updater/server/plugins/api-keys").ApiKeyMetadata | null>;
   };
   clientAuth: {
     varyHeaders: string[];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/supabase",
   "type": "module",
-  "version": "1.0.0-rc.16",
+  "version": "1.0.0-rc.18",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -55,10 +55,10 @@
     "@supabase/supabase-js": "2.76.1",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/plugin-core": "1.0.0-rc.16",
-    "@hot-updater/cli-tools": "1.0.0-rc.16",
-    "@hot-updater/server": "1.0.0-rc.16",
-    "@hot-updater/core": "1.0.0-rc.15"
+    "@hot-updater/core": "1.0.0-rc.15",
+    "@hot-updater/plugin-core": "1.0.0-rc.17",
+    "@hot-updater/server": "1.0.0-rc.18",
+    "@hot-updater/cli-tools": "1.0.0-rc.17"
   },
   "devDependencies": {
     "@electric-sql/pglite": "0.4.1",
@@ -68,9 +68,9 @@
     "execa": "9.5.2",
     "@types/node": "^20",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.0.0-rc.16",
-    "@hot-updater/postgres": "1.0.0-rc.16",
-    "@hot-updater/test-utils": "1.0.0-rc.16"
+    "@hot-updater/mock": "1.0.0-rc.17",
+    "@hot-updater/postgres": "1.0.0-rc.18",
+    "@hot-updater/test-utils": "1.0.0-rc.17"
   },
   "scripts": {
     "build": "tsdown",

package/supabase/edge-functions/runtime.docker.integration.spec.ts

@@ -15,17 +15,13 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { resolvePackageVersion, transformEnv } from "@hot-updater/cli-tools";
 import type { Bundle } from "@hot-updater/core";
-import {
-  type BundleEventRow,
-  type HotUpdaterCoreApi,
-  rowToBundle,
-} from "@hot-updater/plugin-core";
+import { type HotUpdaterCoreApi, rowToBundle } from "@hot-updater/plugin-core";
 import { createHotUpdater } from "@hot-updater/server";
 import {
-  builtInSchema,
   createDatabaseEngine,
   createSqlAdapter,
   type RetryOptions,
+  toolingTargetOf,
 } from "@hot-updater/server/database";
 import {
   createDatabaseCoreApi,
@@ -37,7 +33,9 @@ import {
   createInsightsModel,
   insights,
   insightsSchema,
+  type BundleEventRow,
 } from "@hot-updater/server/plugins/insights";
+import { insightsTestSuite } from "@hot-updater/server/plugins/insights/testing";
 import {
   runContentionHarness,
   setupDatabaseTestSuite,
@@ -55,6 +53,7 @@ import {
   stopRuntime,
   waitForHttpOk,
 } from "../../../../packages/test-utils/src/runtimeProcess";
+import { plugins } from "../../src/plugins";
 import { supabaseDatabase } from "../../src/supabaseDatabase";
 import { supabaseExecutor } from "../../src/supabaseExecutor";
 import {
@@ -174,7 +173,6 @@ const rolloutMove = (
     app_version: "1.0.0",
     channel: "production",
     metadata: {
-      username: null,
       cohort: "1",
       update_strategy: "appVersion",
       fingerprint_hash: null,
@@ -251,9 +249,9 @@ describe.sequential("supabase edge runtime acceptance", () => {
     });
   };
 
-  /** Empties every data table but `keep`; the settings rows stay. */
+  /** Empties every data table but `keep`, the managed plugins' included; the settings rows stay. */
   const truncateDataTables = (keep: readonly string[] = []) => {
-    const tables = supabaseTableNames()
+    const tables = supabaseTableNames(toolingTargetOf(plugins).schema)
       .filter(
         (table) => table !== SUPABASE_SETTINGS_TABLE && !keep.includes(table),
       )
@@ -456,10 +454,14 @@ describe.sequential("supabase edge runtime acceptance", () => {
           clientAccess: "public",
         }).handlers,
       ),
-    createInsightsModel: (database) =>
-      createInsightsModel(
-        createDatabasePluginApis(database, [insights()]).insights,
-      ),
+    plugins: [
+      insightsTestSuite({
+        createModel: (database) =>
+          createInsightsModel(
+            createDatabasePluginApis(database, [insights()]).insights,
+          ),
+      }),
+    ],
   });
 
   it("returns one canonical Channel row under concurrent inserts", async () => {
@@ -728,7 +730,7 @@ describe.sequential("supabase edge runtime acceptance", () => {
         db: createDatabaseEngine({
           adapter:
             latencyMs > 0 ? withAdapterLatency(adapter, latencyMs) : adapter,
-          schema: builtInSchema,
+          schema: toolingTargetOf([insights()]).schema,
           ...(retry === undefined ? {} : { retry }),
         }).database(module),
         // Insights never reads core.

package/supabase/migrations/20260818000000_hot-updater_1.0.0.sql

@@ -46,13 +46,31 @@ CREATE TABLE IF NOT EXISTS "hot_updater_v1_bundle_events__byBundle" ("platform"
 
 CREATE INDEX IF NOT EXISTS "hot_updater_v1_bundle_events_byDay" ON "hot_updater_v1_bundle_events" ("day", "received_at_ms", "id");
 
-CREATE TABLE IF NOT EXISTS "hot_updater_v1_bundle_event_heads" ("install_id" varchar(255) COLLATE "C" NOT NULL, "id" varchar(36) COLLATE "C" NOT NULL, "type" varchar(32) COLLATE "C" NOT NULL, "user_id" varchar(255) COLLATE "C", "from_release_id" varchar(36) COLLATE "C", "from_bundle_id" varchar(36) COLLATE "C", "to_release_id" varchar(36) COLLATE "C", "to_bundle_id" varchar(36) COLLATE "C" NOT NULL, "platform" varchar(16) COLLATE "C" NOT NULL, "app_version" text COLLATE "C" NOT NULL, "channel" text COLLATE "C" NOT NULL, "metadata" jsonb NOT NULL, "received_at_ms" bigint NOT NULL, "current_release_id" varchar(36) COLLATE "C", "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("install_id"));
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_bundle_event_heads" ("install_id" varchar(255) COLLATE "C" NOT NULL, "id" varchar(36) COLLATE "C" NOT NULL, "type" varchar(32) COLLATE "C" NOT NULL, "user_id" varchar(255) COLLATE "C", "from_release_id" varchar(36) COLLATE "C", "from_bundle_id" varchar(36) COLLATE "C", "to_release_id" varchar(36) COLLATE "C", "to_bundle_id" varchar(36) COLLATE "C" NOT NULL, "platform" varchar(16) COLLATE "C" NOT NULL, "app_version" text COLLATE "C" NOT NULL, "channel" text COLLATE "C" NOT NULL, "metadata" jsonb NOT NULL, "received_at_ms" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("install_id"));
 
 CREATE INDEX IF NOT EXISTS "hot_updater_v1_bundle_event_heads_byUser" ON "hot_updater_v1_bundle_event_heads" ("user_id", "install_id");
 
-CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_overview" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "downloads" bigint NOT NULL, "launches" bigint NOT NULL, "failed_launches" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_bundle_event_heads__retention" ON "hot_updater_v1_bundle_event_heads" ("received_at_ms", "install_id");
 
-CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_sketches" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "launch_users" text COLLATE "C", "activity_users" text COLLATE "C", "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_overview" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "downloads" bigint NOT NULL, "launches" bigint NOT NULL, "failed_launches" bigint NOT NULL, "failed_updates" bigint NOT NULL, "patch_downloads" bigint NOT NULL, "patch_fallbacks" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_overview__retention" ON "hot_updater_v1_insights_overview" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_sketches" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "launch_users" text COLLATE "C", "activity_users" text COLLATE "C", "failed_users" text COLLATE "C", "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_sketches__retention" ON "hot_updater_v1_insights_sketches" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_overview_daily" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "downloads" bigint NOT NULL, "launches" bigint NOT NULL, "failed_launches" bigint NOT NULL, "failed_updates" bigint NOT NULL, "patch_downloads" bigint NOT NULL, "patch_fallbacks" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_overview_daily__retention" ON "hot_updater_v1_insights_overview_daily" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_sketches_daily" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "launch_users" text COLLATE "C", "activity_users" text COLLATE "C", "failed_users" text COLLATE "C", "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_sketches_daily__retention" ON "hot_updater_v1_insights_sketches_daily" ("bucket_start_ms", "identity", "_shard");
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_overview_lifetime" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "downloads" bigint NOT NULL, "launches" bigint NOT NULL, "failed_launches" bigint NOT NULL, "failed_updates" bigint NOT NULL, "patch_downloads" bigint NOT NULL, "patch_fallbacks" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_sketches_lifetime" ("identity" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "failed_users" text COLLATE "C", "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("identity", "bucket_start_ms", "_shard"));
 
 CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_distribution" ("channel" text COLLATE "C" NOT NULL, "platform" varchar(16) COLLATE "C" NOT NULL, "app_version" text COLLATE "C" NOT NULL, "release_id" varchar(36) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "latest_installations" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("channel", "platform", "app_version", "release_id", "bucket_start_ms", "_shard"));
 
@@ -60,10 +78,20 @@ CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_distribution_byScope" ON "ho
 
 CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_distribution_byVersion" ON "hot_updater_v1_insights_distribution" ("channel", "platform", "app_version", "bucket_start_ms", "release_id", "_shard");
 
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_distribution__retention" ON "hot_updater_v1_insights_distribution" ("bucket_start_ms", "channel", "platform", "app_version", "release_id", "_shard");
+
 CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_latest_by_bundle" ("platform" varchar(16) COLLATE "C" NOT NULL, "channel" text COLLATE "C" NOT NULL, "bundle_field" varchar(16) COLLATE "C" NOT NULL, "bundle_id" varchar(36) COLLATE "C" NOT NULL, "type" varchar(32) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "installations" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "bundle_field", "bundle_id", "type", "bucket_start_ms", "_shard"));
 
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_latest_by_bundle__retention" ON "hot_updater_v1_insights_latest_by_bundle" ("bucket_start_ms", "platform", "channel", "bundle_field", "bundle_id", "type", "_shard");
+
 CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_outcomes" ("platform" varchar(16) COLLATE "C" NOT NULL, "channel" text COLLATE "C" NOT NULL, "type" varchar(32) COLLATE "C" NOT NULL, "bundle_ref" varchar(41) COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "_shard" bigint NOT NULL, "events" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "type", "bundle_ref", "bucket_start_ms", "_shard"));
 
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_outcomes__retention" ON "hot_updater_v1_insights_outcomes" ("bucket_start_ms", "platform", "channel", "type", "bundle_ref", "_shard");
+
+CREATE TABLE IF NOT EXISTS "hot_updater_v1_insights_failures" ("platform" varchar(16) COLLATE "C" NOT NULL, "channel" text COLLATE "C" NOT NULL, "bucket_start_ms" bigint NOT NULL, "release_id" varchar(36) COLLATE "C" NOT NULL, "stage" varchar(16) COLLATE "C" NOT NULL, "reason" varchar(64) COLLATE "C" NOT NULL, "detail" varchar(160) COLLATE "C" NOT NULL, "_shard" bigint NOT NULL, "events" bigint NOT NULL, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("platform", "channel", "bucket_start_ms", "release_id", "stage", "reason", "detail", "_shard"));
+
+CREATE INDEX IF NOT EXISTS "hot_updater_v1_insights_failures__retention" ON "hot_updater_v1_insights_failures" ("bucket_start_ms", "platform", "channel", "release_id", "stage", "reason", "detail", "_shard");
+
 CREATE TABLE IF NOT EXISTS "hot_updater_v1_api_keys" ("id" varchar(255) COLLATE "C" NOT NULL, "hash" varchar(64) COLLATE "C" NOT NULL, "name" varchar(64) COLLATE "C" NOT NULL, "prefix" varchar(16) COLLATE "C" NOT NULL, "role" varchar(16) COLLATE "C" NOT NULL, "created_at_ms" bigint NOT NULL, "revoked_at_ms" bigint, "_v" bigint NOT NULL DEFAULT 0, PRIMARY KEY ("id"));
 
 CREATE INDEX IF NOT EXISTS "hot_updater_v1_api_keys_byCreated" ON "hot_updater_v1_api_keys" ("created_at_ms", "id");
@@ -94,12 +122,22 @@ ALTER TABLE "hot_updater_v1_insights_overview" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1_insights_sketches" ENABLE ROW LEVEL SECURITY;
 
+ALTER TABLE "hot_updater_v1_insights_overview_daily" ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE "hot_updater_v1_insights_sketches_daily" ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE "hot_updater_v1_insights_overview_lifetime" ENABLE ROW LEVEL SECURITY;
+
+ALTER TABLE "hot_updater_v1_insights_sketches_lifetime" ENABLE ROW LEVEL SECURITY;
+
 ALTER TABLE "hot_updater_v1_insights_distribution" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1_insights_latest_by_bundle" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1_insights_outcomes" ENABLE ROW LEVEL SECURITY;
 
+ALTER TABLE "hot_updater_v1_insights_failures" ENABLE ROW LEVEL SECURITY;
+
 ALTER TABLE "hot_updater_v1_api_keys" ENABLE ROW LEVEL SECURITY;
 
 ALTER TABLE "hot_updater_v1_private_hot_updater_settings" ENABLE ROW LEVEL SECURITY;
@@ -125,7 +163,7 @@ BEGIN
   FOR item IN SELECT value FROM jsonb_array_elements(p_statements) LOOP
     statement := item->>'sql';
     FOR target IN SELECT (regexp_matches(statement, '(?:FROM|INTO|UPDATE|JOIN) "([^"]+)"', 'g'))[1] LOOP
-      IF NOT target = ANY (ARRAY['hot_updater_v1_bundles', 'hot_updater_v1_bundle_patches', 'hot_updater_v1_releases', 'hot_updater_v1_release_catalogs', 'hot_updater_v1_channels', 'hot_updater_v1_bundle_totals', 'hot_updater_v1_bundle_events', 'hot_updater_v1_bundle_events__byBundle', 'hot_updater_v1_bundle_event_heads', 'hot_updater_v1_insights_overview', 'hot_updater_v1_insights_sketches', 'hot_updater_v1_insights_distribution', 'hot_updater_v1_insights_latest_by_bundle', 'hot_updater_v1_insights_outcomes', 'hot_updater_v1_api_keys', 'hot_updater_v1_private_hot_updater_settings', 'hot_updater_v1__hu_write']) THEN
+      IF NOT target = ANY (ARRAY['hot_updater_v1_bundles', 'hot_updater_v1_bundle_patches', 'hot_updater_v1_releases', 'hot_updater_v1_release_catalogs', 'hot_updater_v1_channels', 'hot_updater_v1_bundle_totals', 'hot_updater_v1_bundle_events', 'hot_updater_v1_bundle_events__byBundle', 'hot_updater_v1_bundle_event_heads', 'hot_updater_v1_insights_overview', 'hot_updater_v1_insights_sketches', 'hot_updater_v1_insights_overview_daily', 'hot_updater_v1_insights_sketches_daily', 'hot_updater_v1_insights_overview_lifetime', 'hot_updater_v1_insights_sketches_lifetime', 'hot_updater_v1_insights_distribution', 'hot_updater_v1_insights_latest_by_bundle', 'hot_updater_v1_insights_outcomes', 'hot_updater_v1_insights_failures', 'hot_updater_v1_api_keys', 'hot_updater_v1_private_hot_updater_settings', 'hot_updater_v1__hu_write']) THEN
         RAISE EXCEPTION 'hot_updater_v1_apply: % is not a Hot Updater table', target USING ERRCODE = '42501';
       END IF;
     END LOOP;
@@ -160,6 +198,6 @@ INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v")
 
 INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.core', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
 
-INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.insights', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
+INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.insights', '1.2.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";
 
 INSERT INTO "hot_updater_v1_private_hot_updater_settings" ("key", "value", "_v") VALUES ('schema.apiKeys', '1.0.0', 0) ON CONFLICT ("key") DO UPDATE SET "value" = excluded."value";

package/supabase/migrations.spec.ts

@@ -3,6 +3,7 @@ import path from "node:path";
 
 import { PGlite } from "@electric-sql/pglite";
 import { createHotUpdater } from "@hot-updater/server";
+import { toolingTargetOf } from "@hot-updater/server/database";
 import {
   createDatabasePluginApis,
   createMigrator,
@@ -13,12 +14,14 @@ import {
   createInsightsModel,
   insights,
 } from "@hot-updater/server/plugins/insights";
+import { insightsTestSuite } from "@hot-updater/server/plugins/insights/testing";
 import {
   setupDatabaseTestSuite,
   startHttpTestServer,
 } from "@hot-updater/test-utils";
 import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
 
+import { plugins } from "../src/plugins";
 import { supabaseDatabase } from "../src/supabaseDatabase";
 import { toApplyStatement } from "../src/supabaseExecutor";
 import { supabaseDatabase as supabaseToolingDatabase } from "../src/supabaseMigration";
@@ -31,6 +34,8 @@ import {
 
 const MIGRATIONS = path.resolve("plugins/supabase/supabase/migrations");
 const MIGRATION = path.join(MIGRATIONS, "20260818000000_hot-updater_1.0.0.sql");
+/** The managed server's tables: core's, and its plugins' (Insights and API keys). */
+const managed = toolingTargetOf(plugins);
 
 const state = vi.hoisted(() => ({ db: undefined as PGlite | undefined }));
 
@@ -74,14 +79,16 @@ const apply = (db: PGlite, sql: string) =>
 describe("Supabase schema", () => {
   it("checks in exactly the generated migration as the only one", async () => {
     if (process.env.HOT_UPDATER_UPDATE_SQL === "1") {
-      await fs.writeFile(MIGRATION, supabaseSchemaSql());
+      await fs.writeFile(MIGRATION, supabaseSchemaSql(managed));
     }
     const files = (await fs.readdir(MIGRATIONS)).filter((file) =>
       file.endsWith(".sql"),
     );
     expect(files).toEqual([path.basename(MIGRATION)]);
     // Regenerate with HOT_UPDATER_UPDATE_SQL=1 after the schema changes.
-    expect(await fs.readFile(MIGRATION, "utf8")).toBe(supabaseSchemaSql());
+    expect(await fs.readFile(MIGRATION, "utf8")).toBe(
+      supabaseSchemaSql(managed),
+    );
   });
 
   it("creates namespaced tables with row-level security beside a v0 schema it leaves alone", async () => {
@@ -96,7 +103,7 @@ describe("Supabase schema", () => {
       name.startsWith("hot_updater_v1_"),
     );
     expect(ours.map(({ name }) => name)).toEqual(
-      supabaseTableNames().toSorted(),
+      supabaseTableNames(managed.schema).toSorted(),
     );
     expect(ours.every(({ secured }) => secured)).toBe(true);
     await expect(
@@ -254,10 +261,14 @@ describe("supabaseDatabase over the apply RPC", () => {
           clientAccess: "public",
         }).handlers,
       ),
-    createInsightsModel: (database) =>
-      createInsightsModel(
-        createDatabasePluginApis(database, [insights()]).insights,
-      ),
+    plugins: [
+      insightsTestSuite({
+        createModel: (database) =>
+          createInsightsModel(
+            createDatabasePluginApis(database, [insights()]).insights,
+          ),
+      }),
+    ],
     name: "supabaseDatabase (PGlite, apply RPC)",
     migrate: () => undefined,
     createDatabase: () =>
@@ -266,7 +277,7 @@ describe("supabaseDatabase over the apply RPC", () => {
         supabaseServiceRoleKey: "service-role-key",
       }),
     reset: async () => {
-      const tables = supabaseTableNames()
+      const tables = supabaseTableNames(managed.schema)
         .filter((table) => table !== SUPABASE_SETTINGS_TABLE)
         .map((table) => `public."${table}"`);
       await state.db!.exec(`TRUNCATE ${tables.join(", ")} CASCADE`);