@_linked/s3 1.3.0 → 1.4.0

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @\_linked/s3
 
+## 1.4.0
+
+### Minor Changes
+
+- [#17](https://github.com/linked-fw/s3/pull/17) [`f8d5740`](https://github.com/linked-fw/s3/commit/f8d5740b37cb5f77b62b482465ff2777ce8de2f5) Thanks [@flyon](https://github.com/flyon)! - Configure bucket CORS for cross-origin asset hosting.
+
+  `S3Bucket` gains `getBucketCors()`, `putBucketCors(rules)` and an idempotent
+  `ensureCors(origins, options)` that writes the rule a CDN-hosted release needs
+  (GET/HEAD, the given origins, exposed ETag and content headers, a max age).
+  `getBucketCors()` returns `null` instead of throwing when the bucket has no
+  configuration, and `ensureCors` reports `status: 'forbidden'` with an
+  actionable message rather than throwing when the credentials may not read or
+  set bucket configuration — the normal case on Cloudflare R2 and other providers
+  that keep bucket CORS out of reach of object-scoped tokens.
+
+  For deployments that cannot configure the bucket from code, `checkCorsAccess`
+  (and `S3FileStore.checkAssetCors`) verifies from the outside, using only public
+  read access, that an asset really is loadable from a given page origin.
+  `S3FileStore` also exposes `ensureCors`.
+
+## 1.3.1
+
+### Patch Changes
+
+- [#23](https://github.com/linked-fw/s3/pull/23) [`cdc35a1`](https://github.com/linked-fw/s3/commit/cdc35a15181651c8ffca858e9c2187365366a16c) Thanks [@flyon](https://github.com/flyon)! - Compile the whole `src` folder, and let a bare import resolve under Node10.
+
+  The build only emitted what an entry transitively reached, so any module
+  nothing imported was never built — and never type-checked, so it rotted
+  quietly. `include` now covers `src/**/*` with tests excluded explicitly.
+
+  `typesVersions` maps every specifier through `lib/esm/*`, so a `types` value
+  that already carried that prefix had it applied twice and no consumer on
+  classic Node10 resolution could `import` the package by its bare name.
+
 ## 1.3.0
 
 ### Minor Changes

package/README.md

@@ -105,6 +105,64 @@ if (head === null) {
 `fileExists` is built on it, so checking whether a path is taken no longer
 downloads the object that is about to be overwritten.
 
+## CORS for a CDN-hosted release
+
+`linked build-app` bakes Vite's `base` to the release URL, so a release served
+from a bucket loads its dynamic-import chunks from that bucket rather than from
+the app origin. Module scripts are **always** fetched in CORS mode, so without
+an `Access-Control-Allow-Origin` header on the bucket's responses those chunks
+simply fail to load — the first route that lazy-loads breaks, while the initial
+HTML looks fine.
+
+The rule to set is narrow: `GET` and `HEAD`, your app origins, `ETag` and the
+content headers exposed (range requests and cache validation need them), and a
+`MaxAgeSeconds` so browsers stop re-preflighting.
+
+```ts
+const result = await store.ensureCors(['https://app.example'], {
+  maxAgeSeconds: 3600,
+});
+console.log(result.status); // 'updated' | 'unchanged' | 'forbidden'
+```
+
+`ensureCors` reads the current configuration first and writes nothing when an
+equivalent rule is already in place. It keeps any unrelated rules the bucket
+already carries; pass `{replace: true}` to overwrite them instead. The lower
+level `S3Bucket.putBucketCors(rules)` and `S3Bucket.getBucketCors()` are there
+when you want the raw calls — `getBucketCors()` returns `null` rather than
+throwing when the bucket has no configuration at all.
+
+### Many providers will not let you set this from code
+
+**Expect `status: 'forbidden'`.** Object-scoped credentials — Cloudflare R2
+tokens in particular — can read and write objects but get a `403` on
+`GetBucketCors` and `PutBucketCors`. `ensureCors` reports that instead of
+throwing, and tells you to set the rule in the provider's dashboard (or with an
+account-level token). Treat it as best effort: on most deployments the CORS
+rule is a one-time dashboard setting, and what you actually want in CI is the
+check below.
+
+### Verifying
+
+Verification needs only public read access, so it works everywhere:
+
+```bash
+curl -sI -H 'Origin: https://app.example' https://cdn.example/releases/1.2.3/assets/app.js
+```
+
+Look for `access-control-allow-origin` in the response. Programmatically:
+
+```ts
+const check = await store.checkAssetCors('assets/app.js', 'https://app.example');
+if (!check.ok) {
+  throw new Error(check.message); // also carries the equivalent curl one-liner
+}
+```
+
+`checkCorsAccess(url, origin)` from `@_linked/s3/utils/cors.js` does the same
+against any URL, and never rejects — a network failure comes back as
+`{ok: false, error}`.
+
 ## Registering the store
 
 Registering stores by purpose (`LinkedFileStorage.setStore`, `getStore`,

package/lib/esm/index.d.ts

@@ -3,3 +3,4 @@ import './ontologies/s3.js';
 import './shapes/S3Bucket.js';
 import './shapes/S3FileStore.js';
 import './utils/accessUrl.js';
+import './utils/cors.js';

package/lib/esm/index.js

@@ -9,4 +9,5 @@ import './shapes/S3FileStore.js';
 // import './shapes/S3QuadStore.js';
 //THEN COMPONENTS
 import './utils/accessUrl.js';
+import './utils/cors.js';
 //# sourceMappingURL=index.js.map

package/lib/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AACpB,OAAO,oBAAoB,CAAC;AAE5B,cAAc;AACd,OAAO,sBAAsB,CAAC;AAC9B,OAAO,yBAAyB,CAAC;AACjC,gFAAgF;AAChF,wCAAwC;AACxC,gDAAgD;AAChD,oCAAoC;AAEpC,iBAAiB;AACjB,OAAO,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AACpB,OAAO,oBAAoB,CAAC;AAE5B,cAAc;AACd,OAAO,sBAAsB,CAAC;AAC9B,OAAO,yBAAyB,CAAC;AACjC,gFAAgF;AAChF,wCAAwC;AACxC,gDAAgD;AAChD,oCAAoC;AAEpC,iBAAiB;AACjB,OAAO,sBAAsB,CAAC;AAC9B,OAAO,iBAAiB,CAAC"}

package/lib/esm/shapes/S3Bucket.d.ts

@@ -1,4 +1,5 @@
-import { DeleteObjectCommandInput, HeadObjectCommandOutput, S3Client } from '@aws-sdk/client-s3';
+import { CORSRule, DeleteObjectCommandInput, HeadObjectCommandOutput, S3Client } from '@aws-sdk/client-s3';
+import { type StaticAssetCorsOptions } from '../utils/cors.js';
 import { PutObjectCommandInput, PutObjectCommandOutput } from '@aws-sdk/client-s3/dist-types/commands/PutObjectCommand';
 import { StreamingBlobPayloadInputTypes } from '@smithy/types';
 export interface S3ClientConfigInput {
@@ -106,4 +107,53 @@ export declare class S3Bucket {
      * @returns The promise that will resolve when the bucket exists
      */
     createBucket(): Promise<import("@aws-sdk/client-s3").CreateBucketCommandOutput>;
+    /**
+     * Read the bucket's CORS configuration.
+     *
+     * @returns The rules, or null when the bucket has none configured. A bucket
+     *   without CORS answers `GetBucketCors` with `NoSuchCORSConfiguration`,
+     *   which is an ordinary state and not an error worth throwing over.
+     * @throws When the credentials may not read bucket configuration, with a
+     *   message naming what to do about it. Use {@link ensureCors} if you want
+     *   that case handled for you.
+     */
+    getBucketCors(): Promise<CORSRule[] | null>;
+    /**
+     * Replace the bucket's CORS configuration with the given rules.
+     *
+     * `PutBucketCors` replaces the whole configuration, so pass every rule the
+     * bucket should end up with.
+     *
+     * @throws When the credentials may not write bucket configuration, with a
+     *   message naming what to do about it.
+     */
+    putBucketCors(rules: CORSRule[]): Promise<CORSRule[]>;
+    /**
+     * Make sure the bucket serves static assets to the given page origins.
+     *
+     * Best effort by design: it reads the current configuration first and writes
+     * nothing when an equivalent rule is already there, and it reports rather
+     * than throws when the credentials are not allowed to touch bucket config —
+     * which is the normal case on Cloudflare R2 and other providers that keep
+     * bucket CORS out of reach of object-scoped tokens.
+     *
+     * @param origins The page origins that will load the assets, e.g.
+     *   `['https://app.example']`.
+     * @param options Overrides for the default rule, plus `replace` to drop any
+     *   rules the bucket already carries instead of keeping them.
+     */
+    ensureCors(origins: string[], options?: StaticAssetCorsOptions & {
+        replace?: boolean;
+    }): Promise<EnsureCorsResult>;
+}
+export interface EnsureCorsResult {
+    /**
+     * `unchanged` when an equivalent rule was already in place, `updated` when
+     * the rule was written, `forbidden` when the credentials may not configure
+     * bucket CORS (in which case `message` says what to do instead).
+     */
+    status: 'unchanged' | 'updated' | 'forbidden';
+    /** The rules now in effect, or null when they could not be read or written. */
+    rules: CORSRule[] | null;
+    message: string;
 }

package/lib/esm/shapes/S3Bucket.js

@@ -1,4 +1,5 @@
-import { CopyObjectCommand, CreateBucketCommand, DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, ListObjectsCommand, PutObjectCommand, S3Client, } from '@aws-sdk/client-s3';
+import { CopyObjectCommand, CreateBucketCommand, DeleteObjectCommand, GetBucketCorsCommand, GetObjectCommand, HeadObjectCommand, ListObjectsCommand, PutBucketCorsCommand, PutObjectCommand, S3Client, } from '@aws-sdk/client-s3';
+import { corsAccessDeniedMessage, corsRulesEqual, isCorsAccessDenied, isNoSuchCorsConfiguration, staticAssetCorsRule, } from '../utils/cors.js';
 export const endpoint = process.env.S3_BUCKET_ENDPOINT;
 /**
  * Builds an S3 client from explicit config, falling back to legacy env vars.
@@ -276,5 +277,115 @@ export class S3Bucket {
             console.log('Could not create bucket: ', err);
         }
     }
+    /**
+     * Read the bucket's CORS configuration.
+     *
+     * @returns The rules, or null when the bucket has none configured. A bucket
+     *   without CORS answers `GetBucketCors` with `NoSuchCORSConfiguration`,
+     *   which is an ordinary state and not an error worth throwing over.
+     * @throws When the credentials may not read bucket configuration, with a
+     *   message naming what to do about it. Use {@link ensureCors} if you want
+     *   that case handled for you.
+     */
+    async getBucketCors() {
+        var _a;
+        try {
+            const data = await this._client.send(new GetBucketCorsCommand({ Bucket: this.label }));
+            return (_a = data.CORSRules) !== null && _a !== void 0 ? _a : null;
+        }
+        catch (err) {
+            if (isNoSuchCorsConfiguration(err)) {
+                return null;
+            }
+            if (isCorsAccessDenied(err)) {
+                const error = new Error(corsAccessDeniedMessage(this.label, 'read'));
+                error.name = 'CorsAccessDenied';
+                error.cause = err;
+                throw error;
+            }
+            throw err;
+        }
+    }
+    /**
+     * Replace the bucket's CORS configuration with the given rules.
+     *
+     * `PutBucketCors` replaces the whole configuration, so pass every rule the
+     * bucket should end up with.
+     *
+     * @throws When the credentials may not write bucket configuration, with a
+     *   message naming what to do about it.
+     */
+    async putBucketCors(rules) {
+        try {
+            await this._client.send(new PutBucketCorsCommand({
+                Bucket: this.label,
+                CORSConfiguration: { CORSRules: rules },
+            }));
+            return rules;
+        }
+        catch (err) {
+            if (isCorsAccessDenied(err)) {
+                const error = new Error(corsAccessDeniedMessage(this.label, 'set'));
+                error.name = 'CorsAccessDenied';
+                error.cause = err;
+                throw error;
+            }
+            throw err;
+        }
+    }
+    /**
+     * Make sure the bucket serves static assets to the given page origins.
+     *
+     * Best effort by design: it reads the current configuration first and writes
+     * nothing when an equivalent rule is already there, and it reports rather
+     * than throws when the credentials are not allowed to touch bucket config —
+     * which is the normal case on Cloudflare R2 and other providers that keep
+     * bucket CORS out of reach of object-scoped tokens.
+     *
+     * @param origins The page origins that will load the assets, e.g.
+     *   `['https://app.example']`.
+     * @param options Overrides for the default rule, plus `replace` to drop any
+     *   rules the bucket already carries instead of keeping them.
+     */
+    async ensureCors(origins, options = {}) {
+        const { replace, ...ruleOptions } = options;
+        const desired = staticAssetCorsRule(origins, ruleOptions);
+        let existing;
+        try {
+            existing = await this.getBucketCors();
+        }
+        catch (err) {
+            if ((err === null || err === void 0 ? void 0 : err.name) === 'CorsAccessDenied') {
+                console.warn(err.message);
+                return { status: 'forbidden', rules: null, message: err.message };
+            }
+            throw err;
+        }
+        if (existing === null || existing === void 0 ? void 0 : existing.some((rule) => corsRulesEqual(rule, desired))) {
+            return {
+                status: 'unchanged',
+                rules: existing,
+                message: `Bucket "${this.label}" already allows ${origins.join(', ')}.`,
+            };
+        }
+        // PutBucketCors replaces the entire configuration, so carry any unrelated
+        // rules over unless the caller explicitly asked for a clean slate.
+        const rules = replace || !existing ? [desired] : [...existing, desired];
+        try {
+            await this.putBucketCors(rules);
+        }
+        catch (err) {
+            if ((err === null || err === void 0 ? void 0 : err.name) === 'CorsAccessDenied') {
+                console.warn(err.message);
+                return { status: 'forbidden', rules: null, message: err.message };
+            }
+            throw err;
+        }
+        return {
+            status: 'updated',
+            rules,
+            message: `Bucket "${this.label}" now allows ${origins.join(', ')} for GET/HEAD.`,
+        };
+    }
 }
 //# sourceMappingURL=S3Bucket.js.map

package/lib/esm/shapes/S3Bucket.js.map

@@ -1 +1 @@
-{"version":3,"file":"S3Bucket.js","sourceRoot":"","sources":["../../../src/shapes/S3Bucket.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAEjB,mBAAmB,EACnB,mBAAmB,EAEnB,gBAAgB,EAEhB,iBAAiB,EAGjB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAe5B,MAAM,CAAC,MAAM,QAAQ,GAAW,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAA8B,EAAE,EAAE,EAAE;;IACjE,OAAA,IAAI,QAAQ,CAAC;QACX,QAAQ,EAAE,MAAA,MAAM,CAAC,QAAQ,mCAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC3D,2EAA2E;QAC3E,WAAW,EAAE;YACX,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAChE,eAAe,EACb,MAAA,MAAM,CAAC,eAAe,mCAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;SAC9D;QACD,MAAM,EAAE,MAAA,MAAA,MAAM,CAAC,MAAM,mCAAI,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,WAAW;KAC/D,CAAC,CAAA;CAAA,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,QAAQ;IAMnB;;;OAGG;IACH,YAAY,CAA2B,EAAE,YAAkC;QANnE,qBAAgB,GAAwC,IAAI,GAAG,EAAE,CAAC;QAOxE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,GAAW,EACX,OAA0D;QAE1D,IAAI,YAAY,GAA6B;YAC3C,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;YACR,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,mBAAmB,CAAC,YAAY,CAAC,CACtC,CAAC;YACF,qDAAqD;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,cAAsB,EACtB,OAAuD;QAEvD,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,cAAc;YACnB,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE;YACxC,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC1E,oFAAoF;YACpF,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,KAAK,GAAG,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,GAAW,EACX,KAAqC,EACrC,OAAgE;QAEhE,IAAI,YAAY,GAA0B;YACxC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,aAAa;YAClB,GAAG,OAAO;SACX,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,eAAe;YACf,uCAAuC;YACvC,4BAA4B;YAC5B,YAAY;YACZ,wBAAwB;YACxB,KAAK;YACL,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,EAAE;;QAChC,IAAI,YAAY,GAAG;YACjB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,MAAM,EAAE,MAAM;SACY,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,kBAAkB,CAAC,YAAY,CAAC,CACrC,CAAC;YACF,OAAO,CAAA,MAAA,IAAI,CAAC,QAAQ,0CAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAI,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,IAAI,YAAY,GAA0B;YACxC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAE5D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC3D,6CAA6C;gBAC7C,uBAAuB;gBAEvB,kEAAkE;gBAClE,oGAAoG;gBACpG,qEAAqE;gBACrE,kFAAkF;gBAClF,IAAI,kBAAkB,GAAG,EAAE,CAAC;gBAC5B,6DAA6D;gBAC7D,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAW,CAAC;gBAChC,oDAAoD;gBACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEzC,kEAAkE;gBAClE,kCAAkC;gBAClC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAE3D,wFAAwF;gBACxF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4BAA4B;gBAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW;;QAC1B,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+DAA+D;YAC/D,wDAAwD;YACxD,IACE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,UAAU;gBAC1B,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,0CAAE,cAAc,MAAK,GAAG,EACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW;QACxC,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,gEAAgE;QAChE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,IAAoC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,sCAAsC,GAAG,KAAK,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CACrB,IAAI,gBAAgB,CAAC;gBACnB,GAAG,YAAY;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;aACzB,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,MAAM,wBAAwB,GAAG,GAAG,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,YAAY,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,mBAAmB,CAAC,YAAY,CAAC,CACtC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"S3Bucket.js","sourceRoot":"","sources":["../../../src/shapes/S3Bucket.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAGjB,mBAAmB,EACnB,mBAAmB,EAEnB,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EAGjB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAe1B,MAAM,CAAC,MAAM,QAAQ,GAAW,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAA8B,EAAE,EAAE,EAAE;;IACjE,OAAA,IAAI,QAAQ,CAAC;QACX,QAAQ,EAAE,MAAA,MAAM,CAAC,QAAQ,mCAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC3D,2EAA2E;QAC3E,WAAW,EAAE;YACX,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAChE,eAAe,EACb,MAAA,MAAM,CAAC,eAAe,mCAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;SAC9D;QACD,MAAM,EAAE,MAAA,MAAA,MAAM,CAAC,MAAM,mCAAI,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,WAAW;KAC/D,CAAC,CAAA;CAAA,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,QAAQ;IAMnB;;;OAGG;IACH,YAAY,CAA2B,EAAE,YAAkC;QANnE,qBAAgB,GAAwC,IAAI,GAAG,EAAE,CAAC;QAOxE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,GAAW,EACX,OAA0D;QAE1D,IAAI,YAAY,GAA6B;YAC3C,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;YACR,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,mBAAmB,CAAC,YAAY,CAAC,CACtC,CAAC;YACF,qDAAqD;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,cAAsB,EACtB,OAAuD;QAEvD,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,cAAc;YACnB,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE;YACxC,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC1E,oFAAoF;YACpF,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,KAAK,GAAG,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,GAAW,EACX,KAAqC,EACrC,OAAgE;QAEhE,IAAI,YAAY,GAA0B;YACxC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,aAAa;YAClB,GAAG,OAAO;SACX,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,eAAe;YACf,uCAAuC;YACvC,4BAA4B;YAC5B,YAAY;YACZ,wBAAwB;YACxB,KAAK;YACL,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,EAAE;;QAChC,IAAI,YAAY,GAAG;YACjB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,MAAM,EAAE,MAAM;SACY,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,kBAAkB,CAAC,YAAY,CAAC,CACrC,CAAC;YACF,OAAO,CAAA,MAAA,IAAI,CAAC,QAAQ,0CAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAI,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,IAAI,YAAY,GAA0B;YACxC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAE5D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC3D,6CAA6C;gBAC7C,uBAAuB;gBAEvB,kEAAkE;gBAClE,oGAAoG;gBACpG,qEAAqE;gBACrE,kFAAkF;gBAClF,IAAI,kBAAkB,GAAG,EAAE,CAAC;gBAC5B,6DAA6D;gBAC7D,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAW,CAAC;gBAChC,oDAAoD;gBACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEzC,kEAAkE;gBAClE,kCAAkC;gBAClC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAE3D,wFAAwF;gBACxF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4BAA4B;gBAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW;;QAC1B,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+DAA+D;YAC/D,wDAAwD;YACxD,IACE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,UAAU;gBAC1B,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,0CAAE,cAAc,MAAK,GAAG,EACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW;QACxC,IAAI,YAAY,GAA2B;YACzC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,gEAAgE;QAChE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,IAAoC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,sCAAsC,GAAG,KAAK,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CACrB,IAAI,gBAAgB,CAAC;gBACnB,GAAG,YAAY;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;aACzB,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,MAAM,wBAAwB,GAAG,GAAG,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,YAAY,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,mBAAmB,CAAC,YAAY,CAAC,CACtC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa;;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CACjD,CAAC;YACF,OAAO,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAQ,IAAI,KAAK,CAC1B,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAC5C,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,kBAAkB,CAAC;gBAChC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;gBAClB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,KAAiB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CACrB,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,KAAK;gBAClB,iBAAiB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aACxC,CAAC,CACH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAQ,IAAI,KAAK,CAC1B,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAC3C,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,kBAAkB,CAAC;gBAChC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;gBAClB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,UAAU,CACd,OAAiB,EACjB,UAA0D,EAAE;QAE5D,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE1D,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,MAAK,kBAAkB,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACpE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,WAAW,IAAI,CAAC,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACxE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,MAAK,kBAAkB,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACpE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,KAAK;YACL,OAAO,EAAE,WAAW,IAAI,CAAC,KAAK,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB;SACjF,CAAC;IACJ,CAAC;CACF"}

package/lib/esm/shapes/S3FileStore.d.ts

@@ -1,5 +1,6 @@
 import { FileStat, IFileStore, SaveFileOptions } from '@_linked/core/interfaces/IFileStore';
-import { type S3ClientConfigInput } from './S3Bucket.js';
+import { S3Bucket, type EnsureCorsResult, type S3ClientConfigInput } from './S3Bucket.js';
+import { type CorsCheckOptions, type CorsCheckResult } from '../utils/cors.js';
 import type { Readable } from 'stream';
 export interface S3FileStoreConfig {
     bucketName?: string;
@@ -78,4 +79,24 @@ export declare class S3FileStore implements IFileStore {
      * @returns The stat, or null when the object does not exist.
      */
     statFile(filePath: string): Promise<FileStat | null>;
+    /**
+     * Make sure the store's bucket serves its assets to the given page origins.
+     *
+     * A CDN-hosted release is loaded cross-origin by the browser, so the bucket
+     * needs an `Access-Control-Allow-Origin` rule or the dynamic-import chunks
+     * never load. Best effort: see {@link S3Bucket.ensureCors}.
+     */
+    ensureCors(origins: string[], options?: Parameters<S3Bucket['ensureCors']>[1]): Promise<EnsureCorsResult>;
+    /**
+     * Check, from the outside, that a stored file really is loadable from the
+     * given page origin.
+     *
+     * Uses only public read access, so this works even where the store's
+     * credentials cannot read bucket configuration — which is the usual case.
+     *
+     * @param filePath The path of the file, relative to the endpoint, exactly as
+     *   `saveFile` takes it.
+     * @param origin The page origin that will load it, e.g. `https://app.example`.
+     */
+    checkAssetCors(filePath: string, origin: string, options?: CorsCheckOptions): Promise<CorsCheckResult>;
 }

package/lib/esm/shapes/S3FileStore.js

@@ -1,7 +1,8 @@
 import { normalizeSaveFileOptions, } from '@_linked/core/interfaces/IFileStore';
 import mime from 'mime';
 import path from 'path';
-import { S3Bucket } from './S3Bucket.js';
+import { S3Bucket, } from './S3Bucket.js';
+import { checkCorsAccess, } from '../utils/cors.js';
 const trimSlashes = (value = '') => value.replace(/^\/+|\/+$/g, '');
 const trimTrailingSlash = (value = '') => value.replace(/\/+$/g, '');
 /**
@@ -219,5 +220,30 @@ export class S3FileStore {
             etag: head.ETag,
         };
     }
+    /**
+     * Make sure the store's bucket serves its assets to the given page origins.
+     *
+     * A CDN-hosted release is loaded cross-origin by the browser, so the bucket
+     * needs an `Access-Control-Allow-Origin` rule or the dynamic-import chunks
+     * never load. Best effort: see {@link S3Bucket.ensureCors}.
+     */
+    async ensureCors(origins, options = {}) {
+        return this.bucket.ensureCors(origins, options);
+    }
+    /**
+     * Check, from the outside, that a stored file really is loadable from the
+     * given page origin.
+     *
+     * Uses only public read access, so this works even where the store's
+     * credentials cannot read bucket configuration — which is the usual case.
+     *
+     * @param filePath The path of the file, relative to the endpoint, exactly as
+     *   `saveFile` takes it.
+     * @param origin The page origin that will load it, e.g. `https://app.example`.
+     */
+    async checkAssetCors(filePath, origin, options = {}) {
+        const key = this.applyPrefix(this.normalizePath(filePath));
+        return checkCorsAccess(`${this.accessURL}/${key}`, origin, options);
+    }
 }
 //# sourceMappingURL=S3FileStore.js.map

package/lib/esm/shapes/S3FileStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"S3FileStore.js","sourceRoot":"","sources":["../../../src/shapes/S3FileStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAA4B,MAAM,eAAe,CAAC;AAUnE,MAAM,WAAW,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpE,MAAM,iBAAiB,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,WAAW;IAOtB,YAAY,CAA0B,EAAE,SAA4B,EAAE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,+EAA+E;QAC/E,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAED,IAAY,MAAM;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,iBAAiB;;QACvB,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,CACL,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,UAAU,mCACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,mCAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,mCACxC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CACxC,CAAC;IACJ,CAAC;IAEO,gBAAgB;;QACtB,MAAM,iBAAiB,GACrB,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,SAAS,mCACrB,OAAO,CAAC,GAAG,CAAC,UAAU,mCACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,mCAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAEhC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GACZ,MAAA,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,YAAY,0CAAE,QAAQ,mCAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,mCAC9B,OAAO,CAAC,GAAG,CAAC,0BAA0B,mCACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE5C,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;QACxD,CAAC;QAED,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAY,MAAM;;QAChB,uEAAuE;QACvE,OAAO,WAAW,CAAC,MAAA,IAAI,CAAC,MAAM,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,qFAAqF;QACrF,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;QACvC,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,OAAO,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,MAAe;QAC7B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC1B,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG;YACrB,CAAC,CAAC,MAAM,CAAC;QAEX,OAAO,MAAM;aACV,gBAAgB,CAAC,SAAS,CAAC;aAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;aACxD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,WAAoD,EACpD,OAAkC,EAClC,iBAA2B;;QAE3B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,4EAA4E;QAC5E,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAElE,2EAA2E;QAC3E,4EAA4E;QAC5E,kDAAkD;QAClD,MAAM,uBAAuB,GAAG,MAAA,IAAI,CAAC,iBAAiB,mCAAI,KAAK,CAAC;QAEhE,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAA,IAAI,CAAC,QAAQ,mCAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEzD,0CAA0C;QAC1C,IAAI,uBAAuB,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACjE,oEAAoE;YACpE,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CACjE,QAAQ,CACT,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,CACT,oDAAoD,GAAG,QAAQ,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEvC,IAAI,GAAG,GAAG,MAAM,MAAM;aACnB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE;YAC3B,WAAW,EAAE,QAAQ;YACrB,kEAAkE;YAClE,iDAAiD;YACjD,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEjD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC;YACH,wEAAwE;YACxE,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAC/C,CAAC;YACF,OAAO,IAAI,KAAK,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,2EAA2E;YAC3E,uEAAuE;YACvE,IAAI,EAAE,MAAA,IAAI,CAAC,aAAa,mCAAI,CAAC;YAC7B,kEAAkE;YAClE,8DAA8D;YAC9D,kEAAkE;YAClE,oEAAoE;YACpE,kCAAkC;YAClC,MAAM,EAAE,MAAA,IAAI,CAAC,cAAc,mCAAI,SAAS;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"S3FileStore.js","sourceRoot":"","sources":["../../../src/shapes/S3FileStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,QAAQ,GAGT,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAU1B,MAAM,WAAW,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpE,MAAM,iBAAiB,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,WAAW;IAOtB,YAAY,CAA0B,EAAE,SAA4B,EAAE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,+EAA+E;QAC/E,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAED,IAAY,MAAM;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,iBAAiB;;QACvB,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,CACL,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,UAAU,mCACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,mCAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,mCACxC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CACxC,CAAC;IACJ,CAAC;IAEO,gBAAgB;;QACtB,MAAM,iBAAiB,GACrB,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,SAAS,mCACrB,OAAO,CAAC,GAAG,CAAC,UAAU,mCACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,mCAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAEhC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GACZ,MAAA,MAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,YAAY,0CAAE,QAAQ,mCAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,mCAC9B,OAAO,CAAC,GAAG,CAAC,0BAA0B,mCACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE5C,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;QACxD,CAAC;QAED,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAY,MAAM;;QAChB,uEAAuE;QACvE,OAAO,WAAW,CAAC,MAAA,IAAI,CAAC,MAAM,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,qFAAqF;QACrF,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;QACvC,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,OAAO,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,MAAe;QAC7B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC1B,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG;YACrB,CAAC,CAAC,MAAM,CAAC;QAEX,OAAO,MAAM;aACV,gBAAgB,CAAC,SAAS,CAAC;aAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;aACxD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,WAAoD,EACpD,OAAkC,EAClC,iBAA2B;;QAE3B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,4EAA4E;QAC5E,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAElE,2EAA2E;QAC3E,4EAA4E;QAC5E,kDAAkD;QAClD,MAAM,uBAAuB,GAAG,MAAA,IAAI,CAAC,iBAAiB,mCAAI,KAAK,CAAC;QAEhE,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAA,IAAI,CAAC,QAAQ,mCAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEzD,0CAA0C;QAC1C,IAAI,uBAAuB,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACjE,oEAAoE;YACpE,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CACjE,QAAQ,CACT,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,CACT,oDAAoD,GAAG,QAAQ,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEvC,IAAI,GAAG,GAAG,MAAM,MAAM;aACnB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE;YAC3B,WAAW,EAAE,QAAQ;YACrB,kEAAkE;YAClE,iDAAiD;YACjD,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEjD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC;YACH,wEAAwE;YACxE,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAC/C,CAAC;YACF,OAAO,IAAI,KAAK,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,2EAA2E;YAC3E,uEAAuE;YACvE,IAAI,EAAE,MAAA,IAAI,CAAC,aAAa,mCAAI,CAAC;YAC7B,kEAAkE;YAClE,8DAA8D;YAC9D,kEAAkE;YAClE,oEAAoE;YACpE,kCAAkC;YAClC,MAAM,EAAE,MAAA,IAAI,CAAC,cAAc,mCAAI,SAAS;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,OAAiB,EACjB,UAAiD,EAAE;QAEnD,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,MAAc,EACd,UAA4B,EAAE;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,OAAO,eAAe,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;CACF"}

package/lib/esm/utils/cors.d.ts

@@ -0,0 +1,79 @@
+import type { CORSRule } from '@aws-sdk/client-s3';
+/**
+ * Options for the default "serve static assets" CORS rule.
+ */
+export interface StaticAssetCorsOptions {
+    /** Methods to allow. Static hosting only ever needs GET/HEAD. */
+    allowedMethods?: string[];
+    /** Request headers the browser may send on the preflight. */
+    allowedHeaders?: string[];
+    /**
+     * Response headers the browser is allowed to read. ETag and the content
+     * headers matter for caching and for range requests on large chunks.
+     */
+    exposeHeaders?: string[];
+    /** How long a preflight may be cached, in seconds. */
+    maxAgeSeconds?: number;
+    /** Optional rule id, useful when a bucket carries several rules. */
+    id?: string;
+}
+export declare const DEFAULT_CORS_MAX_AGE_SECONDS = 3600;
+/**
+ * The rule a bucket needs in order to serve a CDN-hosted frontend release.
+ *
+ * `linked build-app` bakes Vite's `base` to the release URL, so dynamic-import
+ * chunks are fetched from the bucket rather than from the app origin. Module
+ * scripts are always fetched in CORS mode, so without
+ * `Access-Control-Allow-Origin` on the response those chunks fail to load.
+ */
+export declare const staticAssetCorsRule: (origins: string[], options?: StaticAssetCorsOptions) => CORSRule;
+/**
+ * Compare two rules by meaning rather than by shape: order within the string
+ * lists is irrelevant to S3, and a missing list is the same as an empty one.
+ * Used so that `ensureCors` can no-op instead of rewriting an identical rule.
+ */
+export declare const corsRulesEqual: (a?: CORSRule, b?: CORSRule) => boolean;
+/**
+ * True when the error means "your credentials may not read or write this
+ * bucket's configuration". Object-scoped credentials (Cloudflare R2 tokens in
+ * particular) can read and write objects but get a 403 on bucket CORS.
+ */
+export declare const isCorsAccessDenied: (error: any) => boolean;
+/** True when the bucket simply has no CORS configuration yet. */
+export declare const isNoSuchCorsConfiguration: (error: any) => boolean;
+export declare const corsAccessDeniedMessage: (bucket: string, action: string) => string;
+export interface CorsCheckOptions {
+    /** Injectable fetch, so this is testable and usable on older runtimes. */
+    fetchImpl?: typeof fetch;
+    /** HEAD by default: it is enough and downloads nothing. */
+    method?: 'HEAD' | 'GET';
+}
+export interface CorsCheckResult {
+    /** True only when the asset responded OK *and* the origin is allowed. */
+    ok: boolean;
+    url: string;
+    origin: string;
+    /** HTTP status, or null when the request never completed. */
+    status: number | null;
+    /** The raw Access-Control-Allow-Origin header, or null when absent. */
+    allowOrigin: string | null;
+    /** Whether that header actually covers the origin we asked about. */
+    allowsOrigin: boolean;
+    /** The raw Access-Control-Expose-Headers header, or null when absent. */
+    exposeHeaders: string | null;
+    /** Set when the request itself failed (DNS, TLS, offline). */
+    error?: string;
+    /** The equivalent one-liner, handy to paste into a runbook or an issue. */
+    curl: string;
+    /** A human-readable verdict. */
+    message: string;
+}
+/**
+ * Verify cross-origin access to a published asset from the outside, the way a
+ * browser would.
+ *
+ * This needs nothing but public read access, so it works on deployments whose
+ * credentials cannot read bucket configuration at all — which is the common
+ * case. Prefer it as the check that a release actually loads.
+ */
+export declare const checkCorsAccess: (url: string, origin: string, options?: CorsCheckOptions) => Promise<CorsCheckResult>;

package/lib/esm/utils/cors.js

@@ -0,0 +1,159 @@
+export const DEFAULT_CORS_MAX_AGE_SECONDS = 3600;
+/**
+ * The rule a bucket needs in order to serve a CDN-hosted frontend release.
+ *
+ * `linked build-app` bakes Vite's `base` to the release URL, so dynamic-import
+ * chunks are fetched from the bucket rather than from the app origin. Module
+ * scripts are always fetched in CORS mode, so without
+ * `Access-Control-Allow-Origin` on the response those chunks fail to load.
+ */
+export const staticAssetCorsRule = (origins, options = {}) => {
+    var _a, _b, _c, _d;
+    const rule = {
+        AllowedMethods: (_a = options.allowedMethods) !== null && _a !== void 0 ? _a : ['GET', 'HEAD'],
+        AllowedOrigins: origins,
+        AllowedHeaders: (_b = options.allowedHeaders) !== null && _b !== void 0 ? _b : ['*'],
+        ExposeHeaders: (_c = options.exposeHeaders) !== null && _c !== void 0 ? _c : [
+            'ETag',
+            'Content-Length',
+            'Content-Type',
+        ],
+        MaxAgeSeconds: (_d = options.maxAgeSeconds) !== null && _d !== void 0 ? _d : DEFAULT_CORS_MAX_AGE_SECONDS,
+    };
+    if (options.id) {
+        rule.ID = options.id;
+    }
+    return rule;
+};
+const normalizeList = (values) => [...(values !== null && values !== void 0 ? values : [])].map((value) => value.trim()).sort();
+/**
+ * Compare two rules by meaning rather than by shape: order within the string
+ * lists is irrelevant to S3, and a missing list is the same as an empty one.
+ * Used so that `ensureCors` can no-op instead of rewriting an identical rule.
+ */
+export const corsRulesEqual = (a, b) => {
+    var _a, _b;
+    if (!a || !b) {
+        return false;
+    }
+    const sameList = (x, y) => {
+        const left = normalizeList(x);
+        const right = normalizeList(y);
+        return (left.length === right.length &&
+            left.every((value, index) => value === right[index]));
+    };
+    return (sameList(a.AllowedMethods, b.AllowedMethods) &&
+        sameList(a.AllowedOrigins, b.AllowedOrigins) &&
+        sameList(a.AllowedHeaders, b.AllowedHeaders) &&
+        sameList(a.ExposeHeaders, b.ExposeHeaders) &&
+        ((_a = a.MaxAgeSeconds) !== null && _a !== void 0 ? _a : null) === ((_b = b.MaxAgeSeconds) !== null && _b !== void 0 ? _b : null));
+};
+/**
+ * True when the error means "your credentials may not read or write this
+ * bucket's configuration". Object-scoped credentials (Cloudflare R2 tokens in
+ * particular) can read and write objects but get a 403 on bucket CORS.
+ */
+export const isCorsAccessDenied = (error) => {
+    var _a, _b;
+    const name = (_a = error === null || error === void 0 ? void 0 : error.name) !== null && _a !== void 0 ? _a : error === null || error === void 0 ? void 0 : error.Code;
+    return (((_b = error === null || error === void 0 ? void 0 : error.$metadata) === null || _b === void 0 ? void 0 : _b.httpStatusCode) === 403 ||
+        name === 'AccessDenied' ||
+        name === 'Forbidden' ||
+        name === 'NotImplemented');
+};
+/** True when the bucket simply has no CORS configuration yet. */
+export const isNoSuchCorsConfiguration = (error) => {
+    var _a;
+    const name = (_a = error === null || error === void 0 ? void 0 : error.name) !== null && _a !== void 0 ? _a : error === null || error === void 0 ? void 0 : error.Code;
+    return (name === 'NoSuchCORSConfiguration' ||
+        name === 'NoSuchCORSConfigurationError');
+};
+export const corsAccessDeniedMessage = (bucket, action) => `These credentials cannot ${action} bucket CORS on "${bucket}". ` +
+    `Many providers (Cloudflare R2 among them) never expose bucket CORS to ` +
+    `object-scoped credentials, so the rule has to be set in the provider's ` +
+    `dashboard or with an account-level token. See the CORS section of the ` +
+    `@_linked/s3 README, and verify the result with checkCorsAccess().`;
+/**
+ * Verify cross-origin access to a published asset from the outside, the way a
+ * browser would.
+ *
+ * This needs nothing but public read access, so it works on deployments whose
+ * credentials cannot read bucket configuration at all — which is the common
+ * case. Prefer it as the check that a release actually loads.
+ */
+export const checkCorsAccess = async (url, origin, options = {}) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    const method = (_a = options.method) !== null && _a !== void 0 ? _a : 'HEAD';
+    const fetchImpl = (_b = options.fetchImpl) !== null && _b !== void 0 ? _b : globalThis.fetch;
+    const curl = `curl -sI -H 'Origin: ${origin}' ${url}`;
+    if (!fetchImpl) {
+        return {
+            ok: false,
+            url,
+            origin,
+            status: null,
+            allowOrigin: null,
+            allowsOrigin: false,
+            exposeHeaders: null,
+            error: 'No fetch implementation available',
+            curl,
+            message: 'Could not check CORS: this runtime has no global fetch. Pass fetchImpl, ' +
+                `or run: ${curl}`,
+        };
+    }
+    let response;
+    try {
+        response = await fetchImpl(url, { method, headers: { Origin: origin } });
+    }
+    catch (error) {
+        const reason = (_c = error === null || error === void 0 ? void 0 : error.message) !== null && _c !== void 0 ? _c : String(error);
+        return {
+            ok: false,
+            url,
+            origin,
+            status: null,
+            allowOrigin: null,
+            allowsOrigin: false,
+            exposeHeaders: null,
+            error: reason,
+            curl,
+            message: `Could not reach ${url}: ${reason}`,
+        };
+    }
+    const allowOrigin = (_e = (_d = response.headers) === null || _d === void 0 ? void 0 : _d.get('access-control-allow-origin')) !== null && _e !== void 0 ? _e : null;
+    const exposeHeaders = (_g = (_f = response.headers) === null || _f === void 0 ? void 0 : _f.get('access-control-expose-headers')) !== null && _g !== void 0 ? _g : null;
+    const allowsOrigin = allowOrigin === '*' ||
+        (!!allowOrigin && allowOrigin.toLowerCase() === origin.toLowerCase());
+    const status = (_h = response.status) !== null && _h !== void 0 ? _h : null;
+    const reachable = status !== null && status >= 200 && status < 400;
+    const ok = reachable && allowsOrigin;
+    let message;
+    if (!reachable) {
+        message = `${url} responded ${status}; the asset itself is not publicly readable.`;
+    }
+    else if (!allowOrigin) {
+        message =
+            `${url} has no Access-Control-Allow-Origin header, so a page on ${origin} ` +
+                `cannot load it as a module script. Configure bucket CORS.`;
+    }
+    else if (!allowsOrigin) {
+        message =
+            `${url} allows "${allowOrigin}", which does not cover ${origin}. ` +
+                `Add that origin to the bucket CORS rule.`;
+    }
+    else {
+        message = `${url} is loadable from ${origin} (Access-Control-Allow-Origin: ${allowOrigin}).`;
+    }
+    return {
+        ok,
+        url,
+        origin,
+        status,
+        allowOrigin,
+        allowsOrigin,
+        exposeHeaders,
+        curl,
+        message,
+    };
+};
+//# sourceMappingURL=cors.js.map

package/lib/esm/utils/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../src/utils/cors.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAAiB,EACjB,UAAkC,EAAE,EAC1B,EAAE;;IACZ,MAAM,IAAI,GAAa;QACrB,cAAc,EAAE,MAAA,OAAO,CAAC,cAAc,mCAAI,CAAC,KAAK,EAAE,MAAM,CAAC;QACzD,cAAc,EAAE,OAAO;QACvB,cAAc,EAAE,MAAA,OAAO,CAAC,cAAc,mCAAI,CAAC,GAAG,CAAC;QAC/C,aAAa,EAAE,MAAA,OAAO,CAAC,aAAa,mCAAI;YACtC,MAAM;YACN,gBAAgB;YAChB,cAAc;SACf;QACD,aAAa,EAAE,MAAA,OAAO,CAAC,aAAa,mCAAI,4BAA4B;KACrE,CAAC;IACF,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,MAAiB,EAAE,EAAE,CAC1C,CAAC,GAAG,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAY,EAAE,CAAY,EAAW,EAAE;;IACpE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,CACL,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5C,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5C,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5C,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC;QAC1C,CAAC,MAAA,CAAC,CAAC,aAAa,mCAAI,IAAI,CAAC,KAAK,CAAC,MAAA,CAAC,CAAC,aAAa,mCAAI,IAAI,CAAC,CACxD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAU,EAAW,EAAE;;IACxD,MAAM,IAAI,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,mCAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,CAAC;IACxC,OAAO,CACL,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,0CAAE,cAAc,MAAK,GAAG;QACxC,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,gBAAgB,CAC1B,CAAC;AACJ,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAU,EAAW,EAAE;;IAC/D,MAAM,IAAI,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,mCAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,CAAC;IACxC,OAAO,CACL,IAAI,KAAK,yBAAyB;QAClC,IAAI,KAAK,8BAA8B,CACxC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CACxE,4BAA4B,MAAM,oBAAoB,MAAM,KAAK;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE,CAAC;AA8BtE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,GAAW,EACX,MAAc,EACd,UAA4B,EAAE,EACJ,EAAE;;IAC5B,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,MAAM,mCAAI,MAAM,CAAC;IACxC,MAAM,SAAS,GAAG,MAAA,OAAO,CAAC,SAAS,mCAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,wBAAwB,MAAM,KAAK,GAAG,EAAE,CAAC;IAEtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG;YACH,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,mCAAmC;YAC1C,IAAI;YACJ,OAAO,EACL,0EAA0E;gBAC1E,WAAW,IAAI,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,mCAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG;YACH,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,MAAM;YACb,IAAI;YACJ,OAAO,EAAE,mBAAmB,GAAG,KAAK,MAAM,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,MAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,GAAG,CAAC,6BAA6B,CAAC,mCAAI,IAAI,CAAC;IAC/D,MAAM,aAAa,GACjB,MAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,GAAG,CAAC,+BAA+B,CAAC,mCAAI,IAAI,CAAC;IACjE,MAAM,YAAY,GAChB,WAAW,KAAK,GAAG;QACnB,CAAC,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,MAAM,mCAAI,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;IACnE,MAAM,EAAE,GAAG,SAAS,IAAI,YAAY,CAAC;IAErC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,GAAG,GAAG,GAAG,cAAc,MAAM,8CAA8C,CAAC;IACrF,CAAC;SAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;YACL,GAAG,GAAG,4DAA4D,MAAM,GAAG;gBAC3E,2DAA2D,CAAC;IAChE,CAAC;SAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO;YACL,GAAG,GAAG,YAAY,WAAW,2BAA2B,MAAM,IAAI;gBAClE,0CAA0C,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,GAAG,GAAG,qBAAqB,MAAM,kCAAkC,WAAW,IAAI,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,EAAE;QACF,GAAG;QACH,MAAM;QACN,MAAM;QACN,WAAW;QACX,YAAY;QACZ,aAAa;QACb,IAAI;QACJ,OAAO;KACR,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -11,12 +11,12 @@
     "type": "git",
     "url": "git+https://github.com/linked-fw/s3.git"
   },
-  "version": "1.3.0",
+  "version": "1.4.0",
   "packageManager": "npm@11.19.1",
   "linkedPackage": true,
   "type": "module",
   "main": "lib/esm/index.js",
-  "types": "./lib/esm/index.d.ts",
+  "types": "index.d.ts",
   "license": "ISC",
   "scripts": {
     "start": "npm exec linked dev",