@adcp/sdk 16.0.0-beta.3 → 16.0.0-beta.4

package/dist/lib/reporting/gcs/reader.mjs

@@ -1,169 +0,0 @@
-import {
-  CanonicalDocumentReadError,
-  createCanonicalReferenceResolver
-} from "../../canonical-references/index.mjs";
-import { assertReportingObjectWriteScope } from "../ledger/object-writes.mjs";
-import { ReportingGcsFenceError, isReportingGcsFenceError } from "./errors.mjs";
-import { activeGcsSignal, readGcsBytes, withGcsDeadline } from "./io.mjs";
-function gcsReportingObjectFromUriV1(uri, bucket, prefix) {
-  if (typeof uri !== "string" || uri.length > 2048) throw new ReportingGcsFenceError("INVALID_INPUT");
-  const expectedBase = `https://storage.googleapis.com/${bucket}/`;
-  let parsed;
-  try {
-    parsed = new URL(uri);
-  } catch {
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  }
-  const name = uri.startsWith(expectedBase) ? uri.slice(expectedBase.length) : "";
-  if (parsed.href !== uri || parsed.username || parsed.password || parsed.search || parsed.hash || !name.startsWith(prefix) || name.length <= prefix.length || name.length > 1024 || !/^[A-Za-z0-9/_.-]+$/.test(name) || name.split("/").some((part) => !part || part === "." || part === ".."))
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  return name;
-}
-function createGcsScopedObjectReadV1(options) {
-  let scope;
-  try {
-    scope = structuredClone(options.scope);
-    assertReportingObjectWriteScope(scope);
-  } catch {
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  }
-  if (typeof scope.principal_id !== "string" || scope.principal_id.length < 1 || scope.principal_id.length > 255 || typeof options.bucket !== "string" || !/^[a-z0-9][a-z0-9.-]{1,220}[a-z0-9]$/.test(options.bucket) || typeof options.objectPrefix !== "string" || !/^[A-Za-z0-9/_.-]+\/$/.test(options.objectPrefix) || options.objectPrefix.length > 1e3 || options.objectPrefix.split("/").slice(0, -1).some((p) => !p || p === "." || p === "..") || typeof options.authorize !== "function" || typeof options.getStorage !== "function")
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  Object.freeze(scope);
-  const { bucket, objectPrefix, authorize, getStorage, signal: parentSignal } = options;
-  if (parentSignal !== void 0 && !(parentSignal instanceof AbortSignal))
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  const maximum = options.maxBytes ?? 64 * 1024 * 1024;
-  const milliseconds = options.operationDeadlineMilliseconds ?? 6e4;
-  if (!Number.isSafeInteger(maximum) || maximum < 1 || maximum > 64 * 1024 * 1024 || !Number.isSafeInteger(milliseconds) || milliseconds < 1 || milliseconds > 6e4)
-    throw new ReportingGcsFenceError("INVALID_INPUT");
-  async function authorized(signal, objectName) {
-    activeGcsSignal(signal);
-    const allowed = await authorize({ scope, bucket, objectPrefix, objectName }, { signal });
-    activeGcsSignal(signal);
-    if (allowed !== true) throw new ReportingGcsFenceError("REVOKED");
-  }
-  return async (uri, maxBytes, signal, nativeVersion) => withGcsDeadline(
-    async (active) => {
-      const name = gcsReportingObjectFromUriV1(uri, bucket, objectPrefix);
-      if (!Number.isSafeInteger(maxBytes) || maxBytes < 1 || nativeVersion !== void 0 && !/^[1-9][0-9]{0,39}$/.test(nativeVersion))
-        throw new ReportingGcsFenceError("INVALID_INPUT");
-      await authorized(active, name);
-      const storage = await getStorage(scope, { signal: active });
-      activeGcsSignal(active);
-      try {
-        const file = storage.bucket(bucket).file(name, nativeVersion ? { generation: nativeVersion } : void 0);
-        const [metadata] = await file.getMetadata();
-        activeGcsSignal(active);
-        if (metadata.metadata?.adcp_reporting_tombstone !== void 0) throw new ReportingGcsFenceError("REVOKED");
-        const generation = String(metadata.generation);
-        if (nativeVersion !== void 0 && generation !== nativeVersion)
-          throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-        if (!/^[1-9][0-9]{0,39}$/.test(generation) || !/^(?:0|[1-9][0-9]{0,19})$/.test(String(metadata.size)) || BigInt(String(metadata.size)) > BigInt(Math.min(maxBytes, maximum)))
-          throw new ReportingGcsFenceError("CONTENT_CONFLICT");
-        const body = await readGcsBytes(
-          storage.bucket(bucket).file(name, { generation }),
-          Math.min(maxBytes, maximum),
-          active
-        );
-        activeGcsSignal(active);
-        await authorized(active, name);
-        return { body, contentType: metadata.contentType, generation };
-      } catch (error) {
-        activeGcsSignal(active);
-        if (isReportingGcsFenceError(error)) throw error;
-        await authorized(active, name);
-        throw new ReportingGcsFenceError("PROVIDER_UNAVAILABLE");
-      }
-    },
-    {
-      signal: parentSignal && signal ? AbortSignal.any([parentSignal, signal]) : parentSignal ?? signal,
-      milliseconds
-    }
-  );
-}
-function createGcsReportingResourceReaderV1(options) {
-  const read = createGcsScopedObjectReadV1(options);
-  const scope = structuredClone(options.scope);
-  const { bucket, objectPrefix } = options;
-  return {
-    async read(request) {
-      if (!request?.context?.materialization?.resource || !["manifest", "object"].includes(request.role) || request.context.obligation?.account_id !== scope.account_id || request.location !== request.context.materialization.resource.location || request.context.materialization.destination_ref !== scope.destination_ref)
-        throw new ReportingGcsFenceError("INVALID_INPUT");
-      let uri = request.location;
-      if (request.role === "object") {
-        if (typeof request.objectRef !== "string" || !/^[A-Za-z0-9_.-]+$/.test(request.objectRef) || request.objectRef === "." || request.objectRef === "..")
-          throw new ReportingGcsFenceError("INVALID_INPUT");
-        const name = gcsReportingObjectFromUriV1(request.location, bucket, objectPrefix);
-        uri = `https://storage.googleapis.com/${bucket}/${name.slice(0, name.lastIndexOf("/") + 1)}${request.objectRef}`;
-      }
-      return read(
-        uri,
-        request.maxBytes,
-        request.signal,
-        request.role === "manifest" ? request.context.materialization.resource?.native_version_ref : void 0
-      );
-    }
-  };
-}
-function createGcsReportingReferenceResolverV1(options) {
-  const read = createGcsScopedObjectReadV1(options);
-  const documentReader = {
-    async read(request) {
-      try {
-        return await read(request.uri, request.maxBytes, request.signal);
-      } catch (error) {
-        if (isReportingGcsFenceError(error)) {
-          if (error.code === "ABORTED") throw new CanonicalDocumentReadError("aborted");
-          if (error.code === "INVALID_INPUT") throw new CanonicalDocumentReadError("unsafe_url");
-          if (error.code === "REVOKED") throw new CanonicalDocumentReadError("access_denied");
-          if (error.code === "CONTENT_CONFLICT") throw new CanonicalDocumentReadError("body_too_large");
-        }
-        throw new CanonicalDocumentReadError("network_error");
-      }
-    }
-  };
-  const parentSignal = options.signal;
-  const resolver = createCanonicalReferenceResolver({ documentReader, signal: parentSignal });
-  const routing = { bucket: options.bucket, objectPrefix: options.objectPrefix };
-  const forced = (input) => ({
-    ...input,
-    documentReader,
-    signal: parentSignal && input?.signal ? AbortSignal.any([parentSignal, input.signal]) : parentSignal ?? input?.signal
-  });
-  function blocked(ref, kind) {
-    try {
-      gcsReportingObjectFromUriV1(ref.uri, routing.bucket, routing.objectPrefix);
-      return void 0;
-    } catch {
-      return {
-        ok: false,
-        status: "blocked_unsafe_url",
-        kind,
-        ref: {
-          uri: "https://storage.googleapis.com/redacted-invalid-reference",
-          digest: /^sha256:[a-f0-9]{64}$/.test(ref?.digest) ? ref.digest : "invalid"
-        },
-        cacheKey: "private-reference-refused",
-        fromCache: false,
-        error: {
-          code: "unsafe_url",
-          message: "Private reference is outside the saved destination scope",
-          retryable: false
-        }
-      };
-    }
-  }
-  return {
-    cache: resolver.cache,
-    resolve: async (ref, context) => blocked(ref, "generic") ?? resolver.resolve(ref, forced(context)),
-    resolveFormatSchema: async (ref, context) => blocked(ref, "format_schema") ?? resolver.resolveFormatSchema(ref, forced(context)),
-    resolvePlatformExtensions: async (ref, context) => blocked(ref, "platform_extensions") ?? resolver.resolvePlatformExtensions(ref, forced(context))
-  };
-}
-export {
-  createGcsReportingReferenceResolverV1,
-  createGcsReportingResourceReaderV1,
-  createGcsScopedObjectReadV1,
-  gcsReportingObjectFromUriV1
-};

package/dist/lib/reporting/gcs/row-provider.d.mts

@@ -1,39 +0,0 @@
-import type { BucketMetadata, Storage } from '@google-cloud/storage';
-import type { ReportingRowObjectProviderV1 } from '../ledger/row-storage-object.mjs';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface CreateGcsReportingRowObjectProviderOptionsV1 {
-    /** Official client used by bindings without a `credentialRef`. */
-    storage?: Storage;
-    /**
-     * Official clients keyed by `credentialRef`. This map is the closed set of
-     * references a binding may name; an unknown reference fails `UNSAFE_BINDING`.
-     */
-    clients?: Readonly<Record<string, Storage>>;
-}
-/**
- * Row-binding bucket policy (shared persistence spec §3.4). Unlike the Managed
- * Delivery probe, versioning, soft delete and retention are allowed as
- * backstops. Refused: buckets without uniform bucket-level access or enforced
- * public access prevention, and any lifecycle `Delete` rule that can match a
- * live object under the binding prefix (no prefix filter, or a prefix that
- * overlaps it). Rules limited to noncurrent versions are allowed.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function assertGcsReportingRowBucketPolicyV1(metadata: BucketMetadata, prefix: string): void;
-/**
- * Google Cloud Storage row-object provider (`@adcp/sdk/reporting/gcs`).
- *
- * Inject official `Storage` clients with host-owned, keyless credentials.
- * Bindings use `location: { bucket }`; `credentialRef` selects an injected
- * client. Writes are single-request uploads with `ifGenerationMatch: 0`, so an
- * existing object is never replaced; the recorded native version is the
- * object generation, and reads and deletes pin it. Objects are stored without
- * `Content-Encoding`, and reads request raw stored bytes, so GCS never
- * transcodes them.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function createGcsReportingRowObjectProviderV1(options: CreateGcsReportingRowObjectProviderOptionsV1): ReportingRowObjectProviderV1;

package/dist/lib/reporting/gcs/row-provider.d.ts

@@ -1,39 +0,0 @@
-import type { BucketMetadata, Storage } from '@google-cloud/storage';
-import type { ReportingRowObjectProviderV1 } from '../ledger/row-storage-object';
-/**
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export interface CreateGcsReportingRowObjectProviderOptionsV1 {
-    /** Official client used by bindings without a `credentialRef`. */
-    storage?: Storage;
-    /**
-     * Official clients keyed by `credentialRef`. This map is the closed set of
-     * references a binding may name; an unknown reference fails `UNSAFE_BINDING`.
-     */
-    clients?: Readonly<Record<string, Storage>>;
-}
-/**
- * Row-binding bucket policy (shared persistence spec §3.4). Unlike the Managed
- * Delivery probe, versioning, soft delete and retention are allowed as
- * backstops. Refused: buckets without uniform bucket-level access or enforced
- * public access prevention, and any lifecycle `Delete` rule that can match a
- * live object under the binding prefix (no prefix filter, or a prefix that
- * overlaps it). Rules limited to noncurrent versions are allowed.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function assertGcsReportingRowBucketPolicyV1(metadata: BucketMetadata, prefix: string): void;
-/**
- * Google Cloud Storage row-object provider (`@adcp/sdk/reporting/gcs`).
- *
- * Inject official `Storage` clients with host-owned, keyless credentials.
- * Bindings use `location: { bucket }`; `credentialRef` selects an injected
- * client. Writes are single-request uploads with `ifGenerationMatch: 0`, so an
- * existing object is never replaced; the recorded native version is the
- * object generation, and reads and deletes pin it. Objects are stored without
- * `Content-Encoding`, and reads request raw stored bytes, so GCS never
- * transcodes them.
- *
- * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
- */
-export declare function createGcsReportingRowObjectProviderV1(options: CreateGcsReportingRowObjectProviderOptionsV1): ReportingRowObjectProviderV1;

package/dist/lib/reporting/gcs/row-provider.js

@@ -1,225 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var row_provider_exports = {};
-__export(row_provider_exports, {
-  assertGcsReportingRowBucketPolicyV1: () => assertGcsReportingRowBucketPolicyV1,
-  createGcsReportingRowObjectProviderV1: () => createGcsReportingRowObjectProviderV1
-});
-module.exports = __toCommonJS(row_provider_exports);
-var import_node_crypto = require("node:crypto");
-var import_row_storage_errors = require('../ledger/row-storage-errors.js');
-var import_row_storage_provider_io = require('../ledger/row-storage-provider-io.js');
-const BUCKET = /^[a-z0-9][a-z0-9._-]{1,220}[a-z0-9]$/;
-const GENERATION = /^[1-9][0-9]{0,15}$/;
-const NONCURRENT_ONLY_CONDITIONS = ["numNewerVersions", "daysSinceNoncurrentTime", "noncurrentTimeBefore"];
-function status(error) {
-  if (!error || typeof error !== "object" || !("code" in error)) return void 0;
-  const code = Number(error.code);
-  return Number.isInteger(code) ? code : void 0;
-}
-function generationOf(metadata) {
-  const generation = metadata?.generation === void 0 ? "" : String(metadata.generation);
-  if (!GENERATION.test(generation) || !Number.isSafeInteger(Number(generation))) {
-    throw new import_row_storage_errors.ReportingRowStoreError("PROVIDER_UNAVAILABLE", "object generation is missing");
-  }
-  return generation;
-}
-function pinnedGeneration(nativeVersionRef) {
-  return typeof nativeVersionRef === "string" && GENERATION.test(nativeVersionRef) && Number.isSafeInteger(Number(nativeVersionRef)) ? nativeVersionRef : null;
-}
-function assertGcsReportingRowBucketPolicyV1(metadata, prefix) {
-  if (!metadata || typeof metadata !== "object") {
-    throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "bucket policy is unavailable");
-  }
-  if (metadata.iamConfiguration?.uniformBucketLevelAccess?.enabled !== true) {
-    throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "bucket must enable uniform bucket-level access");
-  }
-  if (metadata.iamConfiguration?.publicAccessPrevention !== "enforced") {
-    throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "bucket must enforce public access prevention");
-  }
-  for (const rule of metadata.lifecycle?.rule ?? []) {
-    if (rule?.action?.type !== "Delete") continue;
-    const condition = rule.condition ?? {};
-    if (condition.isLive === false) continue;
-    if (NONCURRENT_ONLY_CONDITIONS.some((name) => condition[name] !== void 0 && condition[name] !== null)) continue;
-    const prefixes = condition.matchesPrefix ?? [];
-    if (prefixes.length === 0 || prefixes.some((filter) => (0, import_row_storage_provider_io.reportingRowPrefixFilterOverlaps)(filter, prefix))) {
-      throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "a bucket lifecycle rule can delete live row objects");
-    }
-  }
-}
-function createGcsReportingRowObjectProviderV1(options) {
-  if (!options || typeof options !== "object") {
-    throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "GCS row provider options are required");
-  }
-  const clients = (0, import_row_storage_provider_io.reportingRowClientMap)(options.clients);
-  const isStorage = (value) => !!value && typeof value === "object" && typeof value.bucket === "function";
-  if (options.storage !== void 0 && !isStorage(options.storage) || [...clients.values()].some((client) => !isStorage(client)) || options.storage === void 0 && clients.size === 0) {
-    throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "inject an official Storage client as storage or clients");
-  }
-  const validateLocation = (location) => {
-    (0, import_row_storage_provider_io.assertReportingRowLocationKeys)(location, ["bucket"]);
-    if (!BUCKET.test(location.bucket) || location.bucket.includes("..")) {
-      throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "GCS bucket name is invalid");
-    }
-  };
-  const bucketFor = (input) => {
-    validateLocation(input.location);
-    return (0, import_row_storage_provider_io.selectReportingRowClient)(options.storage, clients, input.credentialRef).bucket(input.location.bucket);
-  };
-  const assertKey = (key) => {
-    if (typeof key !== "string" || key.length === 0 || Buffer.byteLength(key) > 1024) {
-      throw new import_row_storage_errors.ReportingRowStoreError("INVALID_INPUT", "object key is invalid");
-    }
-  };
-  return {
-    name: "gcs",
-    rangedReads: true,
-    validateLocation,
-    probe(input, context) {
-      return (0, import_row_storage_provider_io.runReportingRowProviderOperation)(context.signal, async () => {
-        const bucket = bucketFor(input);
-        let metadata;
-        try {
-          [metadata] = await bucket.getMetadata();
-        } catch (error) {
-          const code = status(error);
-          if (code === 404) throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "bucket does not exist");
-          if (code === 401 || code === 403) {
-            throw new import_row_storage_errors.ReportingRowStoreError("UNSAFE_BINDING", "bucket policy cannot be read with this client");
-          }
-          throw error;
-        }
-        assertGcsReportingRowBucketPolicyV1(metadata, input.prefix);
-      });
-    },
-    putIfAbsent(input, context) {
-      return (0, import_row_storage_provider_io.runReportingRowProviderOperation)(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const file = bucket.file(input.objectRef);
-        try {
-          const bytes = Buffer.from(input.bytes);
-          await file.save(bytes, {
-            resumable: false,
-            gzip: false,
-            // GCS verifies the declared MD5 before creating the object, so a corrupted upload
-            // is refused server-side. Client-side validation is off because on mismatch the
-            // client deletes the key without a generation precondition.
-            validation: false,
-            contentType: input.contentType,
-            metadata: {
-              contentType: input.contentType,
-              md5Hash: (0, import_node_crypto.createHash)("md5").update(bytes).digest("base64"),
-              cacheControl: "no-store",
-              metadata: { ...input.metadata }
-            },
-            preconditionOpts: { ifGenerationMatch: 0 }
-          });
-        } catch (error) {
-          if (status(error) !== 412) throw error;
-          context.signal.throwIfAborted();
-          const [existing] = await bucket.file(input.objectRef).getMetadata();
-          return { created: false, nativeVersionRef: generationOf(existing) };
-        }
-        if (file.metadata?.generation !== void 0) {
-          return { created: true, nativeVersionRef: generationOf(file.metadata) };
-        }
-        const [created] = await file.getMetadata();
-        return { created: true, nativeVersionRef: generationOf(created) };
-      });
-    },
-    get(input, context) {
-      return (0, import_row_storage_provider_io.runReportingRowProviderOperation)(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        (0, import_row_storage_provider_io.assertReportingRowReadBounds)(input);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return null;
-        const file = bucket.file(input.objectRef, { generation });
-        try {
-          if (input.range?.length === 0) {
-            const [metadata] = await file.getMetadata();
-            if (input.range.offset > Number(metadata.size)) {
-              throw new import_row_storage_errors.ReportingRowStoreError("ROWS_INTEGRITY_FAILED", "requested range exceeds the stored object");
-            }
-            return Buffer.alloc(0);
-          }
-          const stream = file.createReadStream({
-            // The client always sends `Accept-Encoding: gzip`; with `decompress: false`
-            // neither GCS nor the client transcodes, so these are the stored bytes.
-            decompress: false,
-            // Digests recorded in PostgreSQL verify every byte returned.
-            validation: false,
-            ...input.range ? { start: input.range.offset, end: input.range.offset + input.range.length - 1 } : {}
-          });
-          return await (0, import_row_storage_provider_io.readReportingRowStream)(stream, input.maxBytes, context.signal);
-        } catch (error) {
-          const code = status(error);
-          if (code === 404) return null;
-          if (code === 416) {
-            throw new import_row_storage_errors.ReportingRowStoreError("ROWS_INTEGRITY_FAILED", "requested range exceeds the stored object");
-          }
-          throw error;
-        }
-      });
-    },
-    stat(input, context) {
-      return (0, import_row_storage_provider_io.runReportingRowProviderOperation)(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return null;
-        try {
-          const [metadata] = await bucket.file(input.objectRef, { generation }).getMetadata();
-          const size = Number(metadata.size);
-          if (String(metadata.generation) !== generation) return null;
-          if (!Number.isSafeInteger(size) || size < 0) {
-            throw new import_row_storage_errors.ReportingRowStoreError("PROVIDER_UNAVAILABLE", "object metadata is malformed");
-          }
-          return { nativeVersionRef: generation, sizeBytes: size };
-        } catch (error) {
-          if (status(error) === 404) return null;
-          throw error;
-        }
-      });
-    },
-    delete(input, context) {
-      return (0, import_row_storage_provider_io.runReportingRowProviderOperation)(context.signal, async () => {
-        const bucket = bucketFor(input);
-        assertKey(input.objectRef);
-        const generation = pinnedGeneration(input.nativeVersionRef);
-        if (generation === null) return "absent";
-        try {
-          await bucket.file(input.objectRef, { generation }).delete();
-          return "deleted";
-        } catch (error) {
-          const code = status(error);
-          if (code === 404 || code === 412) return "absent";
-          throw error;
-        }
-      });
-    }
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  assertGcsReportingRowBucketPolicyV1,
-  createGcsReportingRowObjectProviderV1
-});