hot-updater 0.35.12 → 0.36.0

package/dist/index.mjs

@@ -29,11 +29,12 @@ import { Duplex, PassThrough, Readable, Transform, Writable, getDefaultHighWater
 import { Buffer as Buffer$1 } from "node:buffer";
 import { pipeline } from "stream/promises";
 import { constants as constants$2, createBrotliCompress } from "zlib";
-import { assertNodeStoragePlugin, getContentAddressedAssetStoragePath } from "@hot-updater/plugin-core";
+import { BUNDLE_STORAGE_PREFIX, assertNodeStoragePlugin, createBundleStorageKey, createStorageRootUriWithPath, getContentAddressedAssetStoragePath, getManifestAssetDownloadPath, isContentAddressedAssetBaseStorageUri, resolveManifestAssetStorageUri } from "@hot-updater/plugin-core";
 import { createBundleDiff, createMigrator, generateSchema } from "@hot-updater/server/db";
 import net from "node:net";
 import { setTimeout as setTimeout$1 } from "timers/promises";
 import { createJiti } from "jiti";
+import { getAssetBaseStorageUri, getBundlePatches, getManifestStorageUri, getPatchStorageUri } from "@hot-updater/core";
 //#region ../../node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/error.js
 var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
 	/**
@@ -26302,22 +26303,13 @@ const getRelativeStorageDir = (relativePath) => {
 	const dirname = path.posix.dirname(normalized);
 	return dirname === "." ? "" : dirname;
 };
-const isBrotliManifestBundleAsset = (relativePath) => /(^|\/)index\.[^/]+\.bundle$/.test(relativePath.replace(/\\/g, "/"));
-const getManifestAssetUploadName = (relativePath) => isBrotliManifestBundleAsset(relativePath) ? `${relativePath}.br` : relativePath;
-const replaceBundleStorageUriPath = (storageUri, bundleId, nextPath) => {
-	const storageUrl = new URL(storageUri);
-	const segments = storageUrl.pathname.split("/").filter(Boolean);
-	const bundleIndex = segments.lastIndexOf(bundleId);
-	storageUrl.pathname = `/${[...bundleIndex >= 0 ? segments.slice(0, bundleIndex) : segments.slice(0, -2), nextPath].filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
-	return storageUrl.toString();
-};
 const createStorageUriWithRelativePath = (baseStorageUri, relativePath) => {
 	const storageUrl = new URL(baseStorageUri);
 	storageUrl.pathname = `${storageUrl.pathname.replace(/\/+$/, "")}/${relativePath.replace(/\\/g, "/").split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/")}`;
 	return storageUrl.toString();
 };
 const ensureUploadSourcePath = async ({ outputPath, targetFile, uploadFilename }) => {
-	const uploadName = getManifestAssetUploadName(targetFile.name);
+	const uploadName = getManifestAssetDownloadPath(targetFile.name);
 	const expectedFilename = uploadFilename ?? path.posix.basename(uploadName);
 	const actualFilename = path.basename(targetFile.path);
 	if (uploadName === targetFile.name && expectedFilename === actualFilename) return targetFile.path;
@@ -26334,7 +26326,7 @@ const getUniqueContentAddressedAssetUploadTargets = ({ manifest, targetFiles })
 		const manifestAsset = manifest.assets[targetFile.name];
 		if (!manifestAsset?.fileHash) throw new Error(`Manifest file hash not found for ${targetFile.name}`);
 		const storagePath = getContentAddressedAssetStoragePath({
-			assetPath: getManifestAssetUploadName(targetFile.name),
+			assetPath: getManifestAssetDownloadPath(targetFile.name),
 			fileHash: manifestAsset.fileHash
 		});
 		if (!targets.has(storagePath)) targets.set(storagePath, {
@@ -26592,11 +26584,11 @@ const deployPlatform = async ({ options, platform, platformIndex, platformCount
 						message(formatUploadProgress(uploadedStepCount, uploadStepCount, skippedUploadCount));
 					};
 					updateUploadProgress();
-					const { storageUri } = await storagePlugin.profiles.node.upload(bundleId, bundlePath);
+					const { storageUri } = await storagePlugin.profiles.node.upload(createBundleStorageKey(bundleId), bundlePath);
 					taskRef.storageUri = storageUri;
 					uploadedStepCount += 1;
 					updateUploadProgress();
-					taskRef.assetBaseStorageUri = replaceBundleStorageUriPath(storageUri, bundleId, "assets");
+					taskRef.assetBaseStorageUri = createStorageRootUriWithPath(storageUri, bundleId, "assets");
 					await runWithConcurrency(assetUploadTargets, MANIFEST_ASSET_UPLOAD_CONCURRENCY, async ({ storagePath, targetFile }) => {
 						const storageUri = createStorageUriWithRelativePath(taskRef.assetBaseStorageUri, storagePath);
 						const uploadKey = ["assets", getRelativeStorageDir(storagePath)].filter(Boolean).join("/");
@@ -26610,7 +26602,7 @@ const deployPlatform = async ({ options, platform, platformIndex, platformCount
 						uploadedStepCount += 1;
 						updateUploadProgress();
 					});
-					taskRef.manifestStorageUri = (await storagePlugin.profiles.node.upload(bundleId, taskRef.manifestPath)).storageUri;
+					taskRef.manifestStorageUri = (await storagePlugin.profiles.node.upload(createBundleStorageKey(bundleId), taskRef.manifestPath)).storageUri;
 					uploadedStepCount += 1;
 					updateUploadProgress();
 				} catch (e) {
@@ -27522,6 +27514,8 @@ const LIST_COLUMNS = [
 const DEFAULT_LIMIT = 20;
 const DELETE_VERIFY_ATTEMPTS = 12;
 const DELETE_VERIFY_DELAY_MS = 1e3;
+const STANDALONE_DATABASE_NAME$1 = "standalone-repository";
+const STANDALONE_DELETE_LOOKUP_LIMIT = 100;
 const formatRow = (bundle) => {
 	const out = {};
 	for (const field of LIST_FIELDS) {
@@ -27557,7 +27551,7 @@ const refuseNonInteractiveMutation = (action) => {
 	p.log.error(`Cannot ${action} a bundle without confirmation in a non-interactive shell. Re-run with -y, or use a TTY.`);
 	process.exit(1);
 };
-const safeOnUnmount$2 = async (databasePlugin) => {
+const safeOnUnmount$3 = async (databasePlugin) => {
 	try {
 		await databasePlugin.onUnmount?.();
 	} catch (err) {
@@ -27572,13 +27566,14 @@ const handleBundleList = async (options = {}) => {
 		const result = await databasePlugin.getBundles({
 			where: {
 				channel: options.channel,
-				platform: options.platform
+				platform: options.platform,
+				targetAppVersion: options.targetAppVersion
 			},
 			limit
 		});
 		console.log(options.json ? JSON.stringify(result, null, 2) : tabulate(result.data));
 	} finally {
-		await safeOnUnmount$2(databasePlugin);
+		await safeOnUnmount$3(databasePlugin);
 	}
 };
 const handleBundleShow = async (bundleId, options = {}) => {
@@ -27596,7 +27591,7 @@ const handleBundleShow = async (bundleId, options = {}) => {
 		}
 		p.log.message(formatBundleSummary(bundle));
 	} finally {
-		await safeOnUnmount$2(databasePlugin);
+		await safeOnUnmount$3(databasePlugin);
 	}
 };
 const handleBundleSetEnabled = async (bundleId, nextEnabled, options = {}) => {
@@ -27637,7 +27632,7 @@ const handleBundleSetEnabled = async (bundleId, nextEnabled, options = {}) => {
 			p.log.info(`  ${ui.id(bundleId)}`);
 		}
 	} finally {
-		await safeOnUnmount$2(databasePlugin);
+		await safeOnUnmount$3(databasePlugin);
 	}
 };
 const handleBundleUpdate = async (bundleId, options = {}) => {
@@ -27685,23 +27680,35 @@ const handleBundleUpdate = async (bundleId, options = {}) => {
 		p.log.success("Updated bundle.");
 		p.log.info(`  ${ui.id(bundleId)}`);
 	} finally {
-		await safeOnUnmount$2(databasePlugin);
+		await safeOnUnmount$3(databasePlugin);
 	}
 };
 const handleBundleDelete = async (bundleIds, options = {}) => {
 	printBanner$1();
-	const ids = bundleIds ?? [];
+	const ids = [...new Set(bundleIds ?? [])];
 	if (ids.length === 0) {
 		p.log.error("Provide at least one bundle id.");
 		process.exit(1);
 	}
 	const databasePlugin = await (await loadConfig(null)).database();
 	try {
-		const fetched = await Promise.all(ids.map((id) => databasePlugin.getBundleById(id)));
-		const targets = [];
-		fetched.forEach((bundle, index) => {
-			if (bundle) targets.push(bundle);
-			else p.log.info(`No bundle with id ${ids[index]}. Skipping.`);
+		const lookupBatches = databasePlugin.name === STANDALONE_DATABASE_NAME$1 ? Array.from({ length: Math.ceil(ids.length / STANDALONE_DELETE_LOOKUP_LIMIT) }, (_, index) => ids.slice(index * STANDALONE_DELETE_LOOKUP_LIMIT, (index + 1) * STANDALONE_DELETE_LOOKUP_LIMIT)) : [ids];
+		const matchedBundles = [];
+		for (const batch of lookupBatches) {
+			const { data } = await databasePlugin.getBundles({
+				where: { id: { in: batch } },
+				limit: batch.length
+			});
+			matchedBundles.push(...data);
+		}
+		const matchedById = new Map(matchedBundles.map((bundle) => [bundle.id, bundle]));
+		const targets = ids.flatMap((id) => {
+			const bundle = matchedById.get(id);
+			if (!bundle) {
+				p.log.info(`No bundle with id ${id}. Skipping.`);
+				return [];
+			}
+			return [bundle];
 		});
 		if (targets.length === 0) {
 			p.log.info("No matching bundle records. No changes.");
@@ -27734,7 +27741,7 @@ const handleBundleDelete = async (bundleIds, options = {}) => {
 			p.log.info(`  ${ui.id(firstTarget.id)}`);
 		} else p.log.success(`Deleted ${targets.length} bundle records.`);
 	} finally {
-		await safeOnUnmount$2(databasePlugin);
+		await safeOnUnmount$3(databasePlugin);
 	}
 };
 async function waitForDeletedBundle(databasePlugin, bundleId) {
@@ -50298,7 +50305,7 @@ async function migrateWithMigrator(hotUpdater, skipConfirm, s) {
 }
 //#endregion
 //#region src/commands/promote.ts
-const safeOnUnmount$1 = async (databasePlugin) => {
+const safeOnUnmount$2 = async (databasePlugin) => {
 	try {
 		await databasePlugin.onUnmount?.();
 	} catch (err) {
@@ -50376,14 +50383,14 @@ const handlePromote = async (bundleId, options) => {
 			p.log.info(`  ${ui.id(promoted.id)}`);
 		}
 	} finally {
-		await safeOnUnmount$1(databasePlugin);
+		await safeOnUnmount$2(databasePlugin);
 	}
 };
 //#endregion
 //#region src/commands/rollback.ts
 const summarizeTarget = (target) => ui.block(`${target.platform}`, [ui.kv("Disable", ui.id(target.bundle.id)), target.fallbackId ? ui.kv("Fallback", ui.id(target.fallbackId)) : ui.kv("Fallback", ui.warning("binary-shipped JS"))]);
 const formatRetryHint = (channel, target) => `Re-run with: hot-updater rollback ${channel} -p ${target.platform} --target ${target.bundle.id}`;
-const safeOnUnmount = async (databasePlugin) => {
+const safeOnUnmount$1 = async (databasePlugin) => {
 	try {
 		await databasePlugin.onUnmount?.();
 	} catch (err) {
@@ -50497,10 +50504,329 @@ const handleRollback = async (channel, options = {}) => {
 			process.exit(1);
 		}
 	} finally {
-		await safeOnUnmount(databasePlugin);
+		await safeOnUnmount$1(databasePlugin);
 	}
 };
 //#endregion
+//#region src/commands/storage.ts
+const BUNDLE_PAGE_SIZE = 1e4;
+const STANDALONE_BUNDLE_PAGE_SIZE = 100;
+const STANDALONE_DATABASE_NAME = "standalone-repository";
+const MANIFEST_READ_CONCURRENCY = 4;
+const UUID_V7_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const CONTENT_ADDRESSED_ASSET_KEY_RE = /^assets\/sha256\/[0-9a-f]{2}\/[0-9a-f]{64}(?:\.[^/]+)?$/i;
+const DEFAULT_STORAGE_PRUNE_PROTECTION_MS = 1440 * 60 * 1e3;
+function parseStoragePruneProtection(value) {
+	const match = value.trim().match(/^(\d+)(m|h|d|w)$/i);
+	if (!match) throw new Error("must use a duration such as 30m, 24h, or 7d");
+	const amount = Number.parseInt(match[1], 10);
+	const unit = match[2].toLowerCase();
+	return amount * (unit === "m" ? 60 * 1e3 : unit === "h" ? 3600 * 1e3 : unit === "d" ? 1440 * 60 * 1e3 : 10080 * 60 * 1e3);
+}
+function formatBytes(value) {
+	if (value < 1024) return `${value} B`;
+	const units = [
+		"KB",
+		"MB",
+		"GB",
+		"TB"
+	];
+	let size = value / 1024;
+	let unitIndex = 0;
+	while (size >= 1024 && unitIndex < units.length - 1) {
+		size /= 1024;
+		unitIndex += 1;
+	}
+	return `${size.toFixed(size >= 10 ? 1 : 2)} ${units[unitIndex]}`;
+}
+function formatDuration(value) {
+	const hour = 3600 * 1e3;
+	const day = 24 * hour;
+	if (value % day === 0) return `${value / day}d`;
+	if (value % hour === 0) return `${value / hour}h`;
+	return `${value / (60 * 1e3)}m`;
+}
+const PRUNE_CANDIDATE_COLUMNS = [
+	{
+		key: "type",
+		label: "Type"
+	},
+	{
+		key: "size",
+		label: "Size"
+	},
+	{
+		key: "modified",
+		label: "Modified",
+		format: ui.muted
+	},
+	{
+		key: "key",
+		label: "Key",
+		format: ui.path
+	}
+];
+function formatPruneCandidateTable(candidates) {
+	const rows = candidates.map((candidate) => ({
+		key: candidate.key,
+		modified: candidate.lastModifiedAt?.toISOString() ?? "-",
+		size: formatBytes(candidate.size),
+		type: candidate.reason === "asset" ? "shared asset" : "bundle data"
+	}));
+	return ui.table(PRUNE_CANDIDATE_COLUMNS, rows);
+}
+function normalizeStorageUri(storageUri) {
+	return new URL(storageUri).toString();
+}
+function isLegacyBundleArtifactPath(segments) {
+	const [firstSegment] = segments;
+	return firstSegment === "manifest.json" || firstSegment === "files" || firstSegment === "patches" || firstSegment !== void 0 && /^bundle(?:\..+)?$/.test(firstSegment);
+}
+function getBundleIdFromStorageKey(key) {
+	const segments = key.split("/").filter(Boolean);
+	if (segments[0] === BUNDLE_STORAGE_PREFIX) {
+		const bundleId = segments[1];
+		return bundleId && UUID_V7_RE.test(bundleId) ? bundleId.toLowerCase() : null;
+	}
+	const bundleId = segments[0];
+	return bundleId && UUID_V7_RE.test(bundleId) && isLegacyBundleArtifactPath(segments.slice(1)) ? bundleId.toLowerCase() : null;
+}
+function isBundleManifest(value, bundleId) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const candidate = value;
+	if (candidate.bundleId !== bundleId) return false;
+	const assets = candidate.assets;
+	if (!assets || typeof assets !== "object" || Array.isArray(assets)) return false;
+	return Object.values(assets).every((asset) => {
+		return asset !== null && typeof asset === "object" && !Array.isArray(asset) && typeof asset.fileHash === "string" && /^[0-9a-f]{64}$/i.test(asset.fileHash);
+	});
+}
+async function forEachWithConcurrency(values, concurrency, callback) {
+	let nextIndex = 0;
+	const workers = Array.from({ length: Math.min(concurrency, values.length) }, async () => {
+		while (nextIndex < values.length) {
+			const index = nextIndex;
+			nextIndex += 1;
+			const value = values[index];
+			if (value === void 0) return;
+			await callback(value, index);
+		}
+	});
+	const failure = (await Promise.allSettled(workers)).find((result) => result.status === "rejected");
+	if (failure) throw failure.reason;
+}
+async function loadAllBundles(databasePlugin) {
+	const bundles = [];
+	const seenCursors = /* @__PURE__ */ new Set();
+	const pageSize = databasePlugin.name === STANDALONE_DATABASE_NAME ? STANDALONE_BUNDLE_PAGE_SIZE : BUNDLE_PAGE_SIZE;
+	let after;
+	while (true) {
+		const { data, pagination } = await databasePlugin.getBundles({
+			cursor: after ? { after } : void 0,
+			limit: pageSize,
+			orderBy: {
+				direction: "desc",
+				field: "id"
+			}
+		});
+		bundles.push(...data);
+		const nextCursor = pagination.nextCursor ?? void 0;
+		if (pagination.hasNextPage && !nextCursor) throw new Error("Database cannot provide safe cursor pagination for storage prune.");
+		if (!nextCursor) return bundles;
+		if (seenCursors.has(nextCursor)) throw new Error(`Database returned a repeated cursor: ${nextCursor}`);
+		seenCursors.add(nextCursor);
+		after = nextCursor;
+	}
+}
+async function readManifest(bundle, storagePlugin, workDir, index) {
+	const manifestStorageUri = getManifestStorageUri(bundle);
+	if (!manifestStorageUri) throw new Error(`Cannot prune shared assets: bundle ${bundle.id} has no manifest URI.`);
+	const protocol = new URL(manifestStorageUri).protocol.replace(":", "");
+	let manifestText;
+	if (protocol === "http" || protocol === "https") {
+		const response = await fetch(manifestStorageUri);
+		if (!response.ok) throw new Error(`Cannot prune shared assets: failed to read manifest for bundle ${bundle.id}.`);
+		manifestText = await response.text();
+	} else {
+		if (protocol !== storagePlugin.supportedProtocol) throw new Error(`No storage plugin for protocol: ${protocol}`);
+		const manifestPath = path$1.join(workDir, `${index}.json`);
+		try {
+			await storagePlugin.profiles.node.downloadFile(manifestStorageUri, manifestPath);
+			manifestText = await fs$1.readFile(manifestPath, "utf8");
+		} catch (error) {
+			throw new Error(`Cannot prune shared assets: failed to read manifest for bundle ${bundle.id}.`, { cause: error });
+		}
+	}
+	let manifest;
+	try {
+		manifest = JSON.parse(manifestText);
+	} catch (error) {
+		throw new Error(`Cannot prune shared assets: invalid manifest for bundle ${bundle.id}.`, { cause: error });
+	}
+	if (!isBundleManifest(manifest, bundle.id)) throw new Error(`Cannot prune shared assets: invalid manifest for bundle ${bundle.id}.`);
+	return manifest;
+}
+async function collectReferencedAssetUris(bundles, storagePlugin) {
+	const bundlesWithSharedAssets = bundles.filter((bundle) => {
+		const assetBaseStorageUri = getAssetBaseStorageUri(bundle);
+		if (assetBaseStorageUri === null || !isContentAddressedAssetBaseStorageUri(assetBaseStorageUri)) return false;
+		const protocol = new URL(assetBaseStorageUri).protocol.replace(":", "");
+		if (protocol !== storagePlugin.supportedProtocol) throw new Error(`Cannot prune shared assets: bundle ${bundle.id} uses ${protocol} asset storage, but the configured storage plugin uses ${storagePlugin.supportedProtocol}.`);
+		return true;
+	});
+	const referencedUris = /* @__PURE__ */ new Set();
+	if (bundlesWithSharedAssets.length === 0) return {
+		manifestCount: 0,
+		referencedUris
+	};
+	const workDir = await fs$1.mkdtemp(path$1.join(os.tmpdir(), "hot-updater-storage-prune-"));
+	try {
+		await forEachWithConcurrency(bundlesWithSharedAssets, MANIFEST_READ_CONCURRENCY, async (bundle, index) => {
+			const assetBaseStorageUri = getAssetBaseStorageUri(bundle);
+			const manifest = await readManifest(bundle, storagePlugin, workDir, index);
+			for (const [assetPath, asset] of Object.entries(manifest.assets)) {
+				const downloadPath = getManifestAssetDownloadPath(assetPath);
+				referencedUris.add(normalizeStorageUri(resolveManifestAssetStorageUri({
+					assetBaseStorageUri,
+					assetPath: downloadPath,
+					fileHash: asset.fileHash
+				})));
+			}
+		});
+	} finally {
+		await fs$1.rm(workDir, {
+			force: true,
+			recursive: true
+		});
+	}
+	return {
+		manifestCount: bundlesWithSharedAssets.length,
+		referencedUris
+	};
+}
+function collectBundleStorageReferences(bundles) {
+	const exactUris = /* @__PURE__ */ new Set();
+	const prefixUris = /* @__PURE__ */ new Set();
+	const addExactUri = (storageUri) => {
+		if (storageUri) exactUris.add(normalizeStorageUri(storageUri));
+	};
+	for (const bundle of bundles) {
+		addExactUri(bundle.storageUri);
+		addExactUri(getManifestStorageUri(bundle));
+		addExactUri(getPatchStorageUri(bundle));
+		for (const patch of getBundlePatches(bundle)) addExactUri(patch.patchStorageUri);
+		const assetBaseStorageUri = getAssetBaseStorageUri(bundle);
+		if (assetBaseStorageUri && !isContentAddressedAssetBaseStorageUri(assetBaseStorageUri)) prefixUris.add(`${normalizeStorageUri(assetBaseStorageUri).replace(/\/+$/, "")}/`);
+	}
+	return {
+		exactUris,
+		prefixUris: [...prefixUris]
+	};
+}
+function getPruneCandidates({ bundleStorageReferences, objects, liveBundleIds, referencedAssetUris }) {
+	const candidates = [];
+	for (const object of objects) {
+		const normalizedStorageUri = normalizeStorageUri(object.storageUri);
+		if (bundleStorageReferences.exactUris.has(normalizedStorageUri) || bundleStorageReferences.prefixUris.some((prefix) => normalizedStorageUri.startsWith(prefix))) continue;
+		const bundleId = getBundleIdFromStorageKey(object.key);
+		if (bundleId && !liveBundleIds.has(bundleId)) {
+			candidates.push({
+				...object,
+				reason: "bundle"
+			});
+			continue;
+		}
+		if (CONTENT_ADDRESSED_ASSET_KEY_RE.test(object.key) && !referencedAssetUris.has(normalizedStorageUri)) candidates.push({
+			...object,
+			reason: "asset"
+		});
+	}
+	return candidates;
+}
+async function safeOnUnmount(databasePlugin) {
+	try {
+		await databasePlugin.onUnmount?.();
+	} catch (error) {
+		p.log.warn(`Database plugin onUnmount failed: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+async function handleStoragePrune(options = {}) {
+	printBanner$1();
+	if (options.dryRun && options.yes) throw new Error("Storage prune --dry-run cannot be used with --yes.");
+	const protectNewerThan = options.protectNewerThan ?? 864e5;
+	if (!Number.isFinite(protectNewerThan) || protectNewerThan < 0) throw new Error("Storage prune protection must be a non-negative duration.");
+	const config = await loadConfig(null);
+	const [databasePlugin, loadedStoragePlugin] = await Promise.all([config.database(), config.storage()]);
+	assertNodeStoragePlugin(loadedStoragePlugin);
+	const storagePlugin = loadedStoragePlugin;
+	try {
+		const listObjects = storagePlugin.profiles.node.listObjects;
+		if (!listObjects) throw new Error(`Storage plugin "${storagePlugin.name}" does not support storage prune.`);
+		const deleteObjects = storagePlugin.profiles.node.deleteObjects;
+		if (options.yes && !deleteObjects) throw new Error(`Storage plugin "${storagePlugin.name}" does not support exact object deletion.`);
+		if (options.yes) {
+			p.log.warn("Storage prune requires exclusive access. Stop deploy and promote operations first.");
+			p.log.warn("The current database must own every object under this storage prefix. Use a separate storage basePath for each database or environment.");
+		}
+		const bundles = await loadAllBundles(databasePlugin);
+		const liveBundleIds = new Set(bundles.map((bundle) => bundle.id.toLowerCase()));
+		const bundleStorageReferences = collectBundleStorageReferences(bundles);
+		const { manifestCount, referencedUris } = await collectReferencedAssetUris(bundles, storagePlugin);
+		const objects = await listObjects();
+		const unreferenced = getPruneCandidates({
+			bundleStorageReferences,
+			liveBundleIds,
+			objects,
+			referencedAssetUris: referencedUris
+		});
+		const cutoff = Date.now() - protectNewerThan;
+		let candidates = unreferenced.filter((object) => {
+			const modifiedAt = object.lastModifiedAt?.getTime();
+			return modifiedAt !== void 0 && modifiedAt <= cutoff;
+		});
+		if (options.yes && candidates.length > 0) {
+			const refreshedBundles = await loadAllBundles(databasePlugin);
+			const refreshedBundleIds = new Set(refreshedBundles.map((bundle) => bundle.id.toLowerCase()));
+			const refreshedBundleStorageReferences = collectBundleStorageReferences(refreshedBundles);
+			const { referencedUris: refreshedReferencedUris } = await collectReferencedAssetUris(refreshedBundles, storagePlugin);
+			candidates = getPruneCandidates({
+				bundleStorageReferences: refreshedBundleStorageReferences,
+				liveBundleIds: refreshedBundleIds,
+				objects: candidates,
+				referencedAssetUris: refreshedReferencedUris
+			});
+		}
+		const protectedCount = unreferenced.length - candidates.length;
+		const bundleObjects = candidates.filter((candidate) => candidate.reason === "bundle");
+		const assetObjects = candidates.filter((candidate) => candidate.reason === "asset");
+		const candidateBytes = candidates.reduce((total, candidate) => total + candidate.size, 0);
+		p.log.message(ui.block("Storage prune", [
+			ui.kv("Storage", storagePlugin.name),
+			ui.kv("Bundles", bundles.length),
+			ui.kv("Manifests", manifestCount),
+			ui.kv("Objects", objects.length),
+			ui.kv("Protect newer", formatDuration(protectNewerThan)),
+			ui.kv("Bundle data", bundleObjects.length),
+			ui.kv("Shared assets", assetObjects.length),
+			ui.kv("Reclaimable", formatBytes(candidateBytes)),
+			protectedCount > 0 ? ui.kv("Protected", `${protectedCount} newer/undated objects`) : null
+		].filter((line) => line !== null)));
+		if (candidates.length === 0) {
+			p.log.success("No objects are eligible for pruning.");
+			return;
+		}
+		if (!options.yes) {
+			p.log.message(ui.block("Eligible objects", [formatPruneCandidateTable(candidates)]));
+			p.log.info(`Dry run only. Delete with ${ui.command(`hot-updater storage prune --protect-newer-than ${formatDuration(protectNewerThan)} --yes`)}.`);
+			return;
+		}
+		await deleteObjects(candidates.map((candidate) => candidate.key));
+		p.log.success(`Pruned ${candidates.length} objects (${formatBytes(candidateBytes)}).`);
+	} finally {
+		await safeOnUnmount(databasePlugin);
+	}
+}
+//#endregion
 //#region src/index.ts
 const DEFAULT_CHANNEL = "production";
 const parseBooleanOption = (value) => {
@@ -50528,7 +50854,7 @@ const channelCommand = program.command("channel").description("Manage channels")
 channelCommand.action(handleChannel);
 channelCommand.command("set").description("Set the channel for Android (BuildConfig) and iOS (Info.plist)").argument("<channel>", "the channel to set").action(handleSetChannel);
 const bundleCommand = program.command("bundle").description("Manage bundles");
-bundleCommand.command("list").description("List bundles, most recent first").option("-c, --channel <channel>", "filter by channel").option("--json", "output raw bundle data as JSON").addOption(platformCommandOption).option("--limit <n>", "limit the number of results", (value) => {
+bundleCommand.command("list").description("List bundles, most recent first").option("-c, --channel <channel>", "filter by channel").option("--target-app-version <targetAppVersion>", "filter by exact target app version").option("--json", "output raw bundle data as JSON").addOption(platformCommandOption).option("--limit <n>", "limit the number of results", (value) => {
 	const n = Number.parseInt(value, 10);
 	if (!Number.isInteger(n) || n <= 0) throw new InvalidArgumentError("must be a positive integer");
 	return n;
@@ -50539,6 +50865,21 @@ bundleCommand.command("enable").description("Re-enable a previously disabled bun
 bundleCommand.command("update").description("Update bundle rollout and targeting metadata").argument("<bundle-id>", "the bundle id to update").option("--rollout-cohort-count <count>", "rollout cohort count from 0 to 1000", parseRolloutCohortCount).option("--force-update <value>", "set force update flag (true or false)", parseBooleanOption).option("--target-cohorts <cohorts>", "comma-separated target cohorts").option("--clear-target-cohorts", "clear target cohorts").option("--json", "output the updated bundle as JSON").option("-y, --yes", "skip confirmation prompt").action(handleBundleUpdate);
 bundleCommand.command("delete").description("Delete one or more bundle records by id").argument("<bundle-ids...>", "the bundle id(s) to delete").option("-y, --yes", "skip confirmation prompt").action((bundleIds, options) => handleBundleDelete(bundleIds, options));
 bundleCommand.command("promote").description("Move or copy a bundle to a different channel").argument("<bundle-id>", "the id of the bundle to promote").requiredOption("-t, --target <channel>", "channel to promote the bundle to").addOption(new Option("-a, --action <action>", "promote action (copy creates a new bundle id; move keeps the id)").choices(["copy", "move"]).default("copy")).option("-y, --yes", "skip confirmation prompt").action((bundleId, options) => handlePromote(bundleId, options));
+program.command("storage").description("Manage stored bundle artifacts").command("prune").description("Find or delete unreferenced bundle objects and shared assets").addOption(new Option("--protect-newer-than <duration>", "protect unreferenced objects modified within this duration").argParser((value) => {
+	try {
+		return parseStoragePruneProtection(value);
+	} catch (error) {
+		throw new InvalidArgumentError(error instanceof Error ? error.message : String(error));
+	}
+}).default(DEFAULT_STORAGE_PRUNE_PROTECTION_MS, "24h")).addOption(new Option("--dry-run", "list eligible objects without deleting them (default)").conflicts("yes")).addOption(new Option("-y, --yes", "delete eligible objects after reference validation").conflicts("dryRun")).addHelpText("after", `
+Examples:
+  $ hot-updater storage prune --dry-run
+  $ hot-updater storage prune --protect-newer-than 24h --yes
+
+Only unreferenced bundle objects and shared assets are eligible.
+Protection uses object modification time, not time since bundle deletion.
+Deletion requires exclusive storage access; stop deploy and promote first.
+`).action((options) => handleStoragePrune(options));
 const keysCommand = program.command("keys").description("Code signing key management");
 keysCommand.command("generate").description("Generate RSA key pair for code signing").option("-o, --output <dir>", "output directory for keys", "./keys").option("-k, --key-size <size>", "key size (2048 or 4096)", (value) => {
 	const size = Number.parseInt(value, 10);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hot-updater",
   "type": "module",
-  "version": "0.35.12",
+  "version": "0.36.0",
   "engines": {
     "node": ">=20.19.0"
   },
@@ -49,13 +49,13 @@
   },
   "dependencies": {
     "jiti": "2.6.1",
-    "@hot-updater/android-helper": "0.35.12",
-    "@hot-updater/apple-helper": "0.35.12",
-    "@hot-updater/cli-tools": "0.35.12",
-    "@hot-updater/core": "0.35.12",
-    "@hot-updater/console": "0.35.12",
-    "@hot-updater/plugin-core": "0.35.12",
-    "@hot-updater/server": "0.35.12"
+    "@hot-updater/android-helper": "0.36.0",
+    "@hot-updater/apple-helper": "0.36.0",
+    "@hot-updater/cli-tools": "0.36.0",
+    "@hot-updater/console": "0.36.0",
+    "@hot-updater/core": "0.36.0",
+    "@hot-updater/plugin-core": "0.36.0",
+    "@hot-updater/server": "0.36.0"
   },
   "devDependencies": {
     "@bacons/xcode": "1.0.0-alpha.33",
@@ -78,12 +78,12 @@
     "@typescript/native": "npm:typescript@7.0.2",
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "verkit": "0.3.2",
-    "@hot-updater/aws": "0.35.12",
-    "@hot-updater/firebase": "0.35.12",
-    "@hot-updater/server": "0.35.12",
-    "@hot-updater/cloudflare": "0.35.12",
-    "@hot-updater/test-utils": "0.35.12",
-    "@hot-updater/supabase": "0.35.12"
+    "@hot-updater/cloudflare": "0.36.0",
+    "@hot-updater/aws": "0.36.0",
+    "@hot-updater/server": "0.36.0",
+    "@hot-updater/supabase": "0.36.0",
+    "@hot-updater/firebase": "0.36.0",
+    "@hot-updater/test-utils": "0.36.0"
   },
   "peerDependencies": {
     "@expo/fingerprint": "*",