@hot-updater/supabase 1.0.0-rc.21 → 1.0.0-rc.22

package/dist/edge.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_plugins = require("./plugins-DJUmZYvT.cjs");
+const require_plugins = require("./plugins-jpIkI_T2.cjs");
 //#region src/supabaseEdgeFunctionStorage.ts
 const supabaseEdgeFunctionStorage = (config) => require_plugins.supabaseStorage(config);
 //#endregion

package/dist/edge.mjs

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as supabaseDatabase, t as plugins } from "./plugins-B8grmU79.mjs";
+import { n as supabaseStorage, r as supabaseDatabase, t as plugins } from "./plugins-Dj-4Pk3j.mjs";
 //#region src/supabaseEdgeFunctionStorage.ts
 const supabaseEdgeFunctionStorage = (config) => supabaseStorage(config);
 //#endregion

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_plugins = require("./plugins-DJUmZYvT.cjs");
+const require_plugins = require("./plugins-jpIkI_T2.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as SUPABASE_TABLE_PREFIX, i as SUPABASE_APPLY_FUNCTION, n as supabaseStorage, r as supabaseDatabase$1, t as plugins } from "./plugins-B8grmU79.mjs";
+import { a as SUPABASE_TABLE_PREFIX, i as SUPABASE_APPLY_FUNCTION, n as supabaseStorage, r as supabaseDatabase$1, t as plugins } from "./plugins-Dj-4Pk3j.mjs";
 import { SETTINGS_TABLE, WRITE_GUARD_TABLE, coreSettings, coreTarget, createTableStatements, generateEngineSql, isMultiIndex } from "@hot-updater/plugin-core";
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/{plugins-B8grmU79.mjs → plugins-Dj-4Pk3j.mjs}

@@ -129,13 +129,44 @@ const createSupabaseSignedUrlBatcher = ({ createSignedUrls, expiresIn, formatObj
 //#endregion
 //#region src/supabaseStorage.ts
 const isNotFoundError = (error) => error?.message?.toLowerCase().includes("not found") === true;
+/**
+* Storage's unread response to a download or HEAD request it failed, which
+* supabase-js wraps in a StorageUnknownError.
+*/
+const failedResponseOf = (error) => {
+	if (typeof error !== "object" || error === null || Reflect.get(error, "name") !== "StorageUnknownError") return;
+	const response = Reflect.get(error, "originalError");
+	if (typeof response !== "object" || response === null || typeof Reflect.get(response, "status") !== "number") return;
+	return response;
+};
+/** Storage answers a HEAD request for a missing object with 400 or 404. */
 const isMissingExistsError = (error) => {
-	if (typeof error !== "object" || error === null || Reflect.get(error, "name") !== "StorageUnknownError") return false;
-	const originalError = Reflect.get(error, "originalError");
-	if (typeof originalError !== "object" || originalError === null) return false;
-	const status = Reflect.get(originalError, "status");
+	const status = failedResponseOf(error)?.status;
 	return status === 400 || status === 404;
 };
+/**
+* Storage answers a download of a missing object with 400 or 404 and
+* `error: "not_found"`, and a missing bucket with another error.
+*/
+const isMissingObjectError = async (error) => {
+	const response = failedResponseOf(error);
+	if (response?.status !== 400 && response?.status !== 404) return false;
+	const body = await response.json().catch(() => void 0);
+	return typeof body === "object" && body !== null && Reflect.get(body, "error") === "not_found";
+};
+/** A character Storage rejects in an object name, `?`, or `!`. */
+const ESCAPED_CHARACTER = /[^A-Za-z0-9_/.*'() &$=@;:+,-]/gu;
+const utf8 = new TextEncoder();
+/**
+* The object name Storage keeps a key under. Storage accepts names of ASCII
+* letters, digits and `_/!.*'() &$=@;:+,?-` only, and supabase-js puts a name
+* in the request URL unencoded, where `?` ends the path. So every other
+* character of the key, `?`, and the escape character `!` are stored as `!`
+* and the two hex digits of each of their UTF-8 bytes, such as `#` as `!23`.
+* Distinct keys keep distinct names, and the names need no URL encoding.
+* Deploy's keys, such as `<bundleId>/manifest.json`, are stored as they are.
+*/
+const toObjectName = (key) => key.replace(ESCAPED_CHARACTER, (character) => Array.from(utf8.encode(character), (byte) => `!${byte.toString(16).toUpperCase().padStart(2, "0")}`).join(""));
 const supabaseStorage = (config) => {
 	const bucket = createClient(config.supabaseUrl, resolveSupabaseServiceRoleKey(config)).storage.from(config.bucketName);
 	const getStorageKey = createStorageKeyBuilder(config.basePath);
@@ -154,7 +185,7 @@ const supabaseStorage = (config) => {
 		protocol: "supabase-storage",
 		async put({ key, body, contentLength, contentType }) {
 			const storageKey = getStorageKey(key);
-			const { error } = await bucket.upload(storageKey, body, {
+			const { error } = await bucket.upload(toObjectName(storageKey), body, {
 				contentType,
 				cacheControl: "max-age=31536000",
 				upsert: true,
@@ -170,20 +201,20 @@ const supabaseStorage = (config) => {
 		},
 		async get({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { data, error } = await bucket.download(key);
+			const { data, error } = await bucket.download(toObjectName(key));
 			if (error) {
-				if (isNotFoundError(error)) return { response: null };
+				if (await isMissingObjectError(error)) return { response: null };
 				throw new Error(`Failed to download storage object: ${error.message}`);
 			}
 			return { response: data ? new Response(data) : null };
 		},
 		async getDownloadUrl({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			return { url: await resolveSignedUrl(config.bucketName, key) };
+			return { url: await resolveSignedUrl(config.bucketName, toObjectName(key)) };
 		},
 		async exists({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { data, error } = await bucket.exists(key);
+			const { data, error } = await bucket.exists(toObjectName(key));
 			if (error) {
 				if (isMissingExistsError(error)) return { exists: false };
 				throw error;
@@ -192,7 +223,7 @@ const supabaseStorage = (config) => {
 		},
 		async delete({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { error } = await bucket.remove([key]);
+			const { error } = await bucket.remove([toObjectName(key)]);
 			if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage object: ${error.message}`);
 			return { deleted: true };
 		}

package/dist/{plugins-DJUmZYvT.cjs → plugins-jpIkI_T2.cjs}

@@ -129,13 +129,44 @@ const createSupabaseSignedUrlBatcher = ({ createSignedUrls, expiresIn, formatObj
 //#endregion
 //#region src/supabaseStorage.ts
 const isNotFoundError = (error) => error?.message?.toLowerCase().includes("not found") === true;
+/**
+* Storage's unread response to a download or HEAD request it failed, which
+* supabase-js wraps in a StorageUnknownError.
+*/
+const failedResponseOf = (error) => {
+	if (typeof error !== "object" || error === null || Reflect.get(error, "name") !== "StorageUnknownError") return;
+	const response = Reflect.get(error, "originalError");
+	if (typeof response !== "object" || response === null || typeof Reflect.get(response, "status") !== "number") return;
+	return response;
+};
+/** Storage answers a HEAD request for a missing object with 400 or 404. */
 const isMissingExistsError = (error) => {
-	if (typeof error !== "object" || error === null || Reflect.get(error, "name") !== "StorageUnknownError") return false;
-	const originalError = Reflect.get(error, "originalError");
-	if (typeof originalError !== "object" || originalError === null) return false;
-	const status = Reflect.get(originalError, "status");
+	const status = failedResponseOf(error)?.status;
 	return status === 400 || status === 404;
 };
+/**
+* Storage answers a download of a missing object with 400 or 404 and
+* `error: "not_found"`, and a missing bucket with another error.
+*/
+const isMissingObjectError = async (error) => {
+	const response = failedResponseOf(error);
+	if (response?.status !== 400 && response?.status !== 404) return false;
+	const body = await response.json().catch(() => void 0);
+	return typeof body === "object" && body !== null && Reflect.get(body, "error") === "not_found";
+};
+/** A character Storage rejects in an object name, `?`, or `!`. */
+const ESCAPED_CHARACTER = /[^A-Za-z0-9_/.*'() &$=@;:+,-]/gu;
+const utf8 = new TextEncoder();
+/**
+* The object name Storage keeps a key under. Storage accepts names of ASCII
+* letters, digits and `_/!.*'() &$=@;:+,?-` only, and supabase-js puts a name
+* in the request URL unencoded, where `?` ends the path. So every other
+* character of the key, `?`, and the escape character `!` are stored as `!`
+* and the two hex digits of each of their UTF-8 bytes, such as `#` as `!23`.
+* Distinct keys keep distinct names, and the names need no URL encoding.
+* Deploy's keys, such as `<bundleId>/manifest.json`, are stored as they are.
+*/
+const toObjectName = (key) => key.replace(ESCAPED_CHARACTER, (character) => Array.from(utf8.encode(character), (byte) => `!${byte.toString(16).toUpperCase().padStart(2, "0")}`).join(""));
 const supabaseStorage = (config) => {
 	const bucket = (0, _supabase_supabase_js.createClient)(config.supabaseUrl, resolveSupabaseServiceRoleKey(config)).storage.from(config.bucketName);
 	const getStorageKey = (0, _hot_updater_plugin_core.createStorageKeyBuilder)(config.basePath);
@@ -154,7 +185,7 @@ const supabaseStorage = (config) => {
 		protocol: "supabase-storage",
 		async put({ key, body, contentLength, contentType }) {
 			const storageKey = getStorageKey(key);
-			const { error } = await bucket.upload(storageKey, body, {
+			const { error } = await bucket.upload(toObjectName(storageKey), body, {
 				contentType,
 				cacheControl: "max-age=31536000",
 				upsert: true,
@@ -170,20 +201,20 @@ const supabaseStorage = (config) => {
 		},
 		async get({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { data, error } = await bucket.download(key);
+			const { data, error } = await bucket.download(toObjectName(key));
 			if (error) {
-				if (isNotFoundError(error)) return { response: null };
+				if (await isMissingObjectError(error)) return { response: null };
 				throw new Error(`Failed to download storage object: ${error.message}`);
 			}
 			return { response: data ? new Response(data) : null };
 		},
 		async getDownloadUrl({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			return { url: await resolveSignedUrl(config.bucketName, key) };
+			return { url: await resolveSignedUrl(config.bucketName, toObjectName(key)) };
 		},
 		async exists({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { data, error } = await bucket.exists(key);
+			const { data, error } = await bucket.exists(toObjectName(key));
 			if (error) {
 				if (isMissingExistsError(error)) return { exists: false };
 				throw error;
@@ -192,7 +223,7 @@ const supabaseStorage = (config) => {
 		},
 		async delete({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const { error } = await bucket.remove([key]);
+			const { error } = await bucket.remove([toObjectName(key)]);
 			if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage object: ${error.message}`);
 			return { deleted: true };
 		}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/supabase",
   "type": "module",
-  "version": "1.0.0-rc.21",
+  "version": "1.0.0-rc.22",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -51,10 +51,10 @@
     "@supabase/supabase-js": "2.76.1",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/protocol": "1.0.0-rc.21",
-    "@hot-updater/plugin-core": "1.0.0-rc.21",
-    "@hot-updater/cli-tools": "1.0.0-rc.21",
-    "@hot-updater/server": "1.0.0-rc.21"
+    "@hot-updater/protocol": "1.0.0-rc.22",
+    "@hot-updater/plugin-core": "1.0.0-rc.22",
+    "@hot-updater/cli-tools": "1.0.0-rc.22",
+    "@hot-updater/server": "1.0.0-rc.22"
   },
   "devDependencies": {
     "@electric-sql/pglite": "0.4.1",
@@ -64,9 +64,9 @@
     "execa": "9.5.2",
     "@types/node": "^20",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.0.0-rc.21",
-    "@hot-updater/test-utils": "1.0.0-rc.21",
-    "@hot-updater/postgres": "1.0.0-rc.21"
+    "@hot-updater/mock": "1.0.0-rc.22",
+    "@hot-updater/test-utils": "1.0.0-rc.22",
+    "@hot-updater/postgres": "1.0.0-rc.22"
   },
   "scripts": {
     "build": "tsdown",