@hot-updater/supabase 1.2.0-rc.7 → 1.2.0-rc.9

package/dist/edge.cjs

@@ -1,4 +1,4 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_supabaseStorage = require("./supabaseStorage-BV6GuUz_.cjs");
+const require_supabaseStorage = require("./supabaseStorage-DUa49vGh.cjs");
 exports.supabaseDatabase = require_supabaseStorage.supabaseDatabase;
 exports.supabaseStorage = require_supabaseStorage.supabaseStorage;

package/dist/edge.d.cts

@@ -1,2 +1,2 @@
-import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.cjs";
+import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-C9W-69OP.cjs";
 export { type SupabaseDatabaseConfig, type SupabaseStorageConfig, supabaseDatabase, supabaseStorage };

package/dist/edge.d.mts

@@ -1,2 +1,2 @@
-import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.mjs";
+import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-C9W-69OP.mjs";
 export { type SupabaseDatabaseConfig, type SupabaseStorageConfig, supabaseDatabase, supabaseStorage };

package/dist/edge.mjs

@@ -1,2 +1,2 @@
-import { n as supabaseDatabase, t as supabaseStorage } from "./supabaseStorage-8VAuNYHy.mjs";
+import { n as supabaseDatabase, t as supabaseStorage } from "./supabaseStorage-B6IM8UX2.mjs";
 export { supabaseDatabase, supabaseStorage };

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_supabaseStorage = require("./supabaseStorage-BV6GuUz_.cjs");
+const require_supabaseStorage = require("./supabaseStorage-DUa49vGh.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.cjs";
+import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-C9W-69OP.cjs";
 import { ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.mjs";
+import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-C9W-69OP.mjs";
 import { ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { i as SUPABASE_TABLE_PREFIX, n as supabaseDatabase$1, r as SUPABASE_APPLY_FUNCTION, t as supabaseStorage } from "./supabaseStorage-8VAuNYHy.mjs";
+import { i as SUPABASE_TABLE_PREFIX, n as supabaseDatabase$1, r as SUPABASE_APPLY_FUNCTION, t as supabaseStorage } from "./supabaseStorage-B6IM8UX2.mjs";
 import { SETTINGS_TABLE, WRITE_GUARD_TABLE, coreSettings, coreTarget, createTableStatements, generateEngineSql, isMultiIndex } from "@hot-updater/plugin-core";
 //#region src/supabaseSchema.ts
 /** Every table the apply RPC may name: models, index tables, settings, and the write guard. */

package/dist/init/index.cjs

@@ -6421,14 +6421,15 @@ const supabaseDatabase = (config) => {
 //#region iac/configTemplate.ts
 /**
 * The config init writes. With the `resources` init set up, it names them,
-* and reads the service role key with `secretEnv`, from the environment and
+* and reads the service role key with `secret()`, from the environment and
 * `.env.hotupdater`, then the config's `secrets` adapter. Without them, as
-* the agent scaffold writes it, it reads every value from the environment.
+* the agent scaffold writes it before the agent creates the project, it
+* reads the URL and bucket from the environment, where the agent records
+* them, and the key with `secret()` alike.
 */
 const getConfigScaffold = (build, resources) => {
 	const supabaseUrl = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_URL!" : JSON.stringify(resources.supabaseUrl);
-	const serviceRoleKey = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY!" : `async () =>
-      (await deploySecrets()).HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY`;
+	const serviceRoleKey = "secret(\"HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY\")";
 	const storageConfig = {
 		imports: [{
 			pkg: "@hot-updater/supabase",
@@ -6450,7 +6451,6 @@ const getConfigScaffold = (build, resources) => {
     supabaseServiceRoleKey: ${serviceRoleKey},
   })`
 	};
-	const helperStatements = resources === void 0 ? [] : [(0, _hot_updater_cli_tools.secretEnvHelper)("deploySecrets", ["HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY"])];
 	const builder = new _hot_updater_cli_tools.ConfigBuilder().setBuildType(build).setStorage(storageConfig).setDatabase(databaseConfig).setPlugins({
 		imports: [{
 			pkg: "hot-updater/plugins",
@@ -6462,11 +6462,11 @@ const getConfigScaffold = (build, resources) => {
 		}],
 		configString: "[apiKeys(), insights(), remoteConfig()]"
 	});
-	if (resources !== void 0) builder.addImport({
+	builder.addImport({
 		pkg: "hot-updater",
-		named: ["secretEnv"]
-	}).setIntermediateCode(helperStatements.map(({ code }) => code).join("\n\n"));
-	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder, { helperStatements });
+		named: ["secret"]
+	});
+	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder);
 };
 //#endregion
 //#region iac/init/index.ts

package/dist/init/index.mjs

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import fs from "fs/promises";
 import path from "path";
-import { ConfigBuilder, InitError, MissingInitInputsError, assembleServer, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, moduleSpecifiersOf, p, printAppSetup, provisionClientCredential, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, secretEnvHelper, transformEnv, transformTemplate, writeHotUpdaterFiles } from "@hot-updater/cli-tools";
+import { ConfigBuilder, InitError, MissingInitInputsError, assembleServer, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, moduleSpecifiersOf, p, printAppSetup, provisionClientCredential, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, transformEnv, transformTemplate, writeHotUpdaterFiles } from "@hot-updater/cli-tools";
 import { apiKeys, insights, remoteConfig } from "@hot-updater/server/plugins";
 import { fileURLToPath } from "node:url";
 import { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
@@ -6416,14 +6416,15 @@ const supabaseDatabase = (config) => {
 //#region iac/configTemplate.ts
 /**
 * The config init writes. With the `resources` init set up, it names them,
-* and reads the service role key with `secretEnv`, from the environment and
+* and reads the service role key with `secret()`, from the environment and
 * `.env.hotupdater`, then the config's `secrets` adapter. Without them, as
-* the agent scaffold writes it, it reads every value from the environment.
+* the agent scaffold writes it before the agent creates the project, it
+* reads the URL and bucket from the environment, where the agent records
+* them, and the key with `secret()` alike.
 */
 const getConfigScaffold = (build, resources) => {
 	const supabaseUrl = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_URL!" : JSON.stringify(resources.supabaseUrl);
-	const serviceRoleKey = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY!" : `async () =>
-      (await deploySecrets()).HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY`;
+	const serviceRoleKey = "secret(\"HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY\")";
 	const storageConfig = {
 		imports: [{
 			pkg: "@hot-updater/supabase",
@@ -6445,7 +6446,6 @@ const getConfigScaffold = (build, resources) => {
     supabaseServiceRoleKey: ${serviceRoleKey},
   })`
 	};
-	const helperStatements = resources === void 0 ? [] : [secretEnvHelper("deploySecrets", ["HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY"])];
 	const builder = new ConfigBuilder().setBuildType(build).setStorage(storageConfig).setDatabase(databaseConfig).setPlugins({
 		imports: [{
 			pkg: "hot-updater/plugins",
@@ -6457,11 +6457,11 @@ const getConfigScaffold = (build, resources) => {
 		}],
 		configString: "[apiKeys(), insights(), remoteConfig()]"
 	});
-	if (resources !== void 0) builder.addImport({
+	builder.addImport({
 		pkg: "hot-updater",
-		named: ["secretEnv"]
-	}).setIntermediateCode(helperStatements.map(({ code }) => code).join("\n\n"));
-	return createHotUpdaterConfigScaffoldFromBuilder(builder, { helperStatements });
+		named: ["secret"]
+	});
+	return createHotUpdaterConfigScaffoldFromBuilder(builder);
 };
 //#endregion
 //#region iac/init/index.ts

package/dist/{supabaseStorage-8VAuNYHy.mjs → supabaseStorage-B6IM8UX2.mjs}

@@ -166,7 +166,15 @@ const isMissingObjectError = async (error) => {
 };
 /** A character Storage rejects in an object name, `?`, or `!`. */
 const ESCAPED_CHARACTER = /[^A-Za-z0-9_/.*'() &$=@;:+,-]/gu;
+const ESCAPE_SEQUENCE = /!([0-9A-F]{2})/gu;
 const utf8 = new TextEncoder();
+const utf8Decoder = new TextDecoder("utf-8", { fatal: true });
+/** Objects Storage lists a page at a time. */
+const LIST_PAGE_SIZE = 1e3;
+/** Names Storage removes in one request. */
+const DELETE_BATCH_SIZE = 1e3;
+/** The object the Supabase dashboard keeps in a folder it creates. */
+const EMPTY_FOLDER_PLACEHOLDER = ".emptyFolderPlaceholder";
 /**
 * The object name Storage keeps a key under. Storage accepts names of ASCII
 * letters, digits and `_/!.*'() &$=@;:+,?-` only, and supabase-js puts a name
@@ -177,6 +185,34 @@ const utf8 = new TextEncoder();
 * Deploy's keys, such as `<bundleId>/manifest.json`, are stored as they are.
 */
 const toObjectName = (key) => key.replace(ESCAPED_CHARACTER, (character) => Array.from(utf8.encode(character), (byte) => `!${byte.toString(16).toUpperCase().padStart(2, "0")}`).join(""));
+/** The key `toObjectName` stored under `name`, or null for a name it never makes. */
+const fromObjectName = (name) => {
+	const bytes = [];
+	const parts = [];
+	const flush = () => {
+		if (bytes.length === 0) return true;
+		try {
+			parts.push(utf8Decoder.decode(new Uint8Array(bytes)));
+		} catch {
+			return false;
+		}
+		bytes.length = 0;
+		return true;
+	};
+	let index = 0;
+	for (const match of name.matchAll(ESCAPE_SEQUENCE)) {
+		if (match.index !== index) {
+			if (!flush()) return null;
+			parts.push(name.slice(index, match.index));
+		}
+		bytes.push(Number.parseInt(match[1], 16));
+		index = match.index + match[0].length;
+	}
+	if (!flush()) return null;
+	parts.push(name.slice(index));
+	const key = parts.join("");
+	return toObjectName(key) === name ? key : null;
+};
 const supabaseStorage = (config) => {
 	let client;
 	const bucket = async () => (await (client ??= resolveSupabaseServiceRoleKey(config).then((key) => createClient(config.supabaseUrl, key), (error) => {
@@ -184,6 +220,7 @@ const supabaseStorage = (config) => {
 		throw error;
 	}))).storage.from(config.bucketName);
 	const getStorageKey = createStorageKeyBuilder(config.basePath);
+	const basePrefix = getStorageKey() ? `${getStorageKey()}/` : "";
 	const resolveSignedUrl = createSupabaseSignedUrlBatcher({
 		createSignedUrls: async (_bucketName, keys, expiresIn) => (await bucket()).createSignedUrls(keys, expiresIn),
 		expiresIn: config.signedUrlExpiresIn ?? 3600,
@@ -240,6 +277,51 @@ const supabaseStorage = (config) => {
 			const { error } = await (await bucket()).remove([toObjectName(key)]);
 			if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage object: ${error.message}`);
 			return { deleted: true };
+		},
+		async listObjects(prefix) {
+			const objects = [];
+			const folder = toObjectName(getStorageKey(prefix ?? ""));
+			let cursor;
+			do {
+				const { data, error } = await (await bucket()).listV2({
+					prefix: folder ? `${folder}/` : "",
+					limit: LIST_PAGE_SIZE,
+					...cursor === void 0 ? {} : { cursor }
+				});
+				if (error) throw new Error(`Failed to list storage objects: ${error.message}`);
+				for (const entry of data.objects) {
+					const name = entry.key ?? entry.name;
+					if (name.split("/").at(-1) === EMPTY_FOLDER_PLACEHOLDER) continue;
+					const key = fromObjectName(name);
+					if (key === null || !key.startsWith(basePrefix)) continue;
+					let storageUri;
+					try {
+						storageUri = createStorageUri({
+							protocol: "supabase-storage",
+							bucket: config.bucketName,
+							key
+						});
+					} catch {
+						continue;
+					}
+					const updatedAt = entry.updated_at ?? entry.created_at;
+					objects.push({
+						key: key.slice(basePrefix.length),
+						...updatedAt ? { lastModifiedAt: new Date(updatedAt) } : {},
+						size: Number(entry.metadata?.size ?? 0),
+						storageUri
+					});
+				}
+				cursor = data.hasNext ? data.nextCursor : void 0;
+			} while (cursor !== void 0);
+			return objects;
+		},
+		async deleteObjects(relativeKeys) {
+			const names = relativeKeys.map((key) => toObjectName(getStorageKey(key)));
+			for (let offset = 0; offset < names.length; offset += DELETE_BATCH_SIZE) {
+				const { error } = await (await bucket()).remove(names.slice(offset, offset + DELETE_BATCH_SIZE));
+				if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage objects: ${error.message}`);
+			}
 		}
 	});
 };

package/dist/{supabaseStorage-B131_auF.d.cts → supabaseStorage-C9W-69OP.d.cts}

@@ -1,13 +1,13 @@
-import { EngineDatabase, StorageAdapterWith } from "@hot-updater/plugin-core";
+import { EngineDatabase, Lazy, StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {
   supabaseUrl: string;
   /**
    * The project's service role key, or a function that returns it, such as
-   * one that reads it with `secretEnv`: called on the first request, so a
-   * config loads without the key.
+   * `secret("<name>")` in `hot-updater.config.ts`: called on the first
+   * request, so a config loads without the key.
    */
-  supabaseServiceRoleKey: string | (() => string | Promise<string>);
+  supabaseServiceRoleKey: Lazy<string>;
 };
 //#endregion
 //#region src/supabaseDatabase.d.ts
@@ -28,6 +28,6 @@ type SupabaseStorageConfig = SupabaseServiceRoleConfig & {
   /** Signed download URL lifetime in seconds. @default 3600 */
   signedUrlExpiresIn?: number;
 };
-declare const supabaseStorage: (config: SupabaseStorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete">;
+declare const supabaseStorage: (config: SupabaseStorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete" | "listObjects" | "deleteObjects">;
 //#endregion
 export { supabaseDatabase as i, supabaseStorage as n, SupabaseDatabaseConfig as r, SupabaseStorageConfig as t };

package/dist/{supabaseStorage-B131_auF.d.mts → supabaseStorage-C9W-69OP.d.mts}

@@ -1,13 +1,13 @@
-import { EngineDatabase, StorageAdapterWith } from "@hot-updater/plugin-core";
+import { EngineDatabase, Lazy, StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {
   supabaseUrl: string;
   /**
    * The project's service role key, or a function that returns it, such as
-   * one that reads it with `secretEnv`: called on the first request, so a
-   * config loads without the key.
+   * `secret("<name>")` in `hot-updater.config.ts`: called on the first
+   * request, so a config loads without the key.
    */
-  supabaseServiceRoleKey: string | (() => string | Promise<string>);
+  supabaseServiceRoleKey: Lazy<string>;
 };
 //#endregion
 //#region src/supabaseDatabase.d.ts
@@ -28,6 +28,6 @@ type SupabaseStorageConfig = SupabaseServiceRoleConfig & {
   /** Signed download URL lifetime in seconds. @default 3600 */
   signedUrlExpiresIn?: number;
 };
-declare const supabaseStorage: (config: SupabaseStorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete">;
+declare const supabaseStorage: (config: SupabaseStorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete" | "listObjects" | "deleteObjects">;
 //#endregion
 export { supabaseDatabase as i, supabaseStorage as n, SupabaseDatabaseConfig as r, SupabaseStorageConfig as t };

package/dist/{supabaseStorage-BV6GuUz_.cjs → supabaseStorage-DUa49vGh.cjs}

@@ -166,7 +166,15 @@ const isMissingObjectError = async (error) => {
 };
 /** A character Storage rejects in an object name, `?`, or `!`. */
 const ESCAPED_CHARACTER = /[^A-Za-z0-9_/.*'() &$=@;:+,-]/gu;
+const ESCAPE_SEQUENCE = /!([0-9A-F]{2})/gu;
 const utf8 = new TextEncoder();
+const utf8Decoder = new TextDecoder("utf-8", { fatal: true });
+/** Objects Storage lists a page at a time. */
+const LIST_PAGE_SIZE = 1e3;
+/** Names Storage removes in one request. */
+const DELETE_BATCH_SIZE = 1e3;
+/** The object the Supabase dashboard keeps in a folder it creates. */
+const EMPTY_FOLDER_PLACEHOLDER = ".emptyFolderPlaceholder";
 /**
 * The object name Storage keeps a key under. Storage accepts names of ASCII
 * letters, digits and `_/!.*'() &$=@;:+,?-` only, and supabase-js puts a name
@@ -177,6 +185,34 @@ const utf8 = new TextEncoder();
 * Deploy's keys, such as `<bundleId>/manifest.json`, are stored as they are.
 */
 const toObjectName = (key) => key.replace(ESCAPED_CHARACTER, (character) => Array.from(utf8.encode(character), (byte) => `!${byte.toString(16).toUpperCase().padStart(2, "0")}`).join(""));
+/** The key `toObjectName` stored under `name`, or null for a name it never makes. */
+const fromObjectName = (name) => {
+	const bytes = [];
+	const parts = [];
+	const flush = () => {
+		if (bytes.length === 0) return true;
+		try {
+			parts.push(utf8Decoder.decode(new Uint8Array(bytes)));
+		} catch {
+			return false;
+		}
+		bytes.length = 0;
+		return true;
+	};
+	let index = 0;
+	for (const match of name.matchAll(ESCAPE_SEQUENCE)) {
+		if (match.index !== index) {
+			if (!flush()) return null;
+			parts.push(name.slice(index, match.index));
+		}
+		bytes.push(Number.parseInt(match[1], 16));
+		index = match.index + match[0].length;
+	}
+	if (!flush()) return null;
+	parts.push(name.slice(index));
+	const key = parts.join("");
+	return toObjectName(key) === name ? key : null;
+};
 const supabaseStorage = (config) => {
 	let client;
 	const bucket = async () => (await (client ??= resolveSupabaseServiceRoleKey(config).then((key) => (0, _supabase_supabase_js.createClient)(config.supabaseUrl, key), (error) => {
@@ -184,6 +220,7 @@ const supabaseStorage = (config) => {
 		throw error;
 	}))).storage.from(config.bucketName);
 	const getStorageKey = (0, _hot_updater_plugin_core.createStorageKeyBuilder)(config.basePath);
+	const basePrefix = getStorageKey() ? `${getStorageKey()}/` : "";
 	const resolveSignedUrl = createSupabaseSignedUrlBatcher({
 		createSignedUrls: async (_bucketName, keys, expiresIn) => (await bucket()).createSignedUrls(keys, expiresIn),
 		expiresIn: config.signedUrlExpiresIn ?? 3600,
@@ -240,6 +277,51 @@ const supabaseStorage = (config) => {
 			const { error } = await (await bucket()).remove([toObjectName(key)]);
 			if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage object: ${error.message}`);
 			return { deleted: true };
+		},
+		async listObjects(prefix) {
+			const objects = [];
+			const folder = toObjectName(getStorageKey(prefix ?? ""));
+			let cursor;
+			do {
+				const { data, error } = await (await bucket()).listV2({
+					prefix: folder ? `${folder}/` : "",
+					limit: LIST_PAGE_SIZE,
+					...cursor === void 0 ? {} : { cursor }
+				});
+				if (error) throw new Error(`Failed to list storage objects: ${error.message}`);
+				for (const entry of data.objects) {
+					const name = entry.key ?? entry.name;
+					if (name.split("/").at(-1) === EMPTY_FOLDER_PLACEHOLDER) continue;
+					const key = fromObjectName(name);
+					if (key === null || !key.startsWith(basePrefix)) continue;
+					let storageUri;
+					try {
+						storageUri = (0, _hot_updater_plugin_core.createStorageUri)({
+							protocol: "supabase-storage",
+							bucket: config.bucketName,
+							key
+						});
+					} catch {
+						continue;
+					}
+					const updatedAt = entry.updated_at ?? entry.created_at;
+					objects.push({
+						key: key.slice(basePrefix.length),
+						...updatedAt ? { lastModifiedAt: new Date(updatedAt) } : {},
+						size: Number(entry.metadata?.size ?? 0),
+						storageUri
+					});
+				}
+				cursor = data.hasNext ? data.nextCursor : void 0;
+			} while (cursor !== void 0);
+			return objects;
+		},
+		async deleteObjects(relativeKeys) {
+			const names = relativeKeys.map((key) => toObjectName(getStorageKey(key)));
+			for (let offset = 0; offset < names.length; offset += DELETE_BATCH_SIZE) {
+				const { error } = await (await bucket()).remove(names.slice(offset, offset + DELETE_BATCH_SIZE));
+				if (error && !isNotFoundError(error)) throw new Error(`Failed to delete storage objects: ${error.message}`);
+			}
 		}
 	});
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/supabase",
   "type": "module",
-  "version": "1.2.0-rc.7",
+  "version": "1.2.0-rc.9",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -51,10 +51,10 @@
     "@supabase/supabase-js": "2.76.1",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/protocol": "1.2.0-rc.7",
-    "@hot-updater/plugin-core": "1.2.0-rc.7",
-    "@hot-updater/cli-tools": "1.2.0-rc.7",
-    "@hot-updater/server": "1.2.0-rc.7"
+    "@hot-updater/protocol": "1.2.0-rc.9",
+    "@hot-updater/plugin-core": "1.2.0-rc.9",
+    "@hot-updater/server": "1.2.0-rc.9",
+    "@hot-updater/cli-tools": "1.2.0-rc.9"
   },
   "devDependencies": {
     "@electric-sql/pglite": "0.4.1",
@@ -64,9 +64,9 @@
     "execa": "9.5.2",
     "@types/node": "^20",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.2.0-rc.7",
-    "@hot-updater/test-utils": "1.2.0-rc.7",
-    "@hot-updater/postgres": "1.2.0-rc.7"
+    "@hot-updater/mock": "1.2.0-rc.9",
+    "@hot-updater/test-utils": "1.2.0-rc.9",
+    "@hot-updater/postgres": "1.2.0-rc.9"
   },
   "scripts": {
     "build": "tsdown",