@backblaze-labs/b2-sdk 0.1.0 → 0.3.0

package/dist/simulator/capabilities.cjs

@@ -1,53 +1,68 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const auth = require("../types/auth.cjs");
-const ENDPOINT_CAPABILITIES = {
-  // Auth endpoint takes credentials, not an auth token — no cap check.
-  b2_authorize_account: [],
-  // Bucket management.
-  b2_create_bucket: [auth.Capability.WriteBuckets],
-  b2_delete_bucket: [auth.Capability.DeleteBuckets],
-  b2_update_bucket: [auth.Capability.WriteBuckets],
-  b2_list_buckets: [auth.Capability.ListBuckets],
-  // File upload + URL acquisition.
-  b2_get_upload_url: [auth.Capability.WriteFiles],
-  b2_get_upload_part_url: [auth.Capability.WriteFiles],
-  b2_upload_file: [auth.Capability.WriteFiles],
-  b2_upload_part: [auth.Capability.WriteFiles],
-  b2_start_large_file: [auth.Capability.WriteFiles],
-  b2_finish_large_file: [auth.Capability.WriteFiles],
-  b2_cancel_large_file: [auth.Capability.WriteFiles],
-  b2_copy_file: [auth.Capability.WriteFiles],
-  b2_copy_part: [auth.Capability.WriteFiles],
-  // File listing + reading.
-  b2_list_file_names: [auth.Capability.ListFiles],
-  b2_list_file_versions: [auth.Capability.ListFiles],
-  b2_list_unfinished_large_files: [auth.Capability.ListFiles],
-  b2_list_parts: [auth.Capability.ListFiles],
-  b2_get_file_info: [auth.Capability.ReadFiles],
-  b2_download_file_by_id: [auth.Capability.ReadFiles],
-  b2_download_file_by_name: [auth.Capability.ReadFiles],
-  // File mutations.
-  b2_hide_file: [auth.Capability.WriteFiles],
-  b2_delete_file_version: [auth.Capability.DeleteFiles],
-  // Object lock + legal hold.
-  b2_update_file_retention: [auth.Capability.WriteFileRetentions],
-  b2_update_file_legal_hold: [auth.Capability.WriteFileLegalHolds],
-  // Application keys.
-  b2_create_key: [auth.Capability.WriteKeys],
-  b2_list_keys: [auth.Capability.ListKeys],
-  b2_delete_key: [auth.Capability.DeleteKeys],
-  // Download authorisation.
-  b2_get_download_authorization: [auth.Capability.ShareFiles],
-  // Notification rules.
-  b2_get_bucket_notification_rules: [auth.Capability.ReadBucketNotifications],
-  b2_set_bucket_notification_rules: [auth.Capability.WriteBucketNotifications]
+const require_auth = require("../types/auth.cjs");
+//#region src/simulator/capabilities.ts
+/**
+* Capability requirement table mapping each B2 native API endpoint to
+* the capability (or capabilities — usually one) the caller's
+* application key must hold to invoke it. Used by `B2Simulator` when
+* `strictAuth: true` is set, so test code that exercises a restricted
+* key sees the same `403 unauthorized` response real B2 would return.
+*
+* Source: https://www.backblaze.com/apidocs (each endpoint page lists
+* the required capability in its description).
+*
+* @packageDocumentation
+*/
+/** Endpoint → required capability(s). An empty array means "no capability check". */
+var ENDPOINT_CAPABILITIES = {
+	b2_authorize_account: [],
+	b2_create_bucket: [require_auth.Capability.WriteBuckets],
+	b2_delete_bucket: [require_auth.Capability.DeleteBuckets],
+	b2_update_bucket: [require_auth.Capability.WriteBuckets],
+	b2_list_buckets: [require_auth.Capability.ListBuckets],
+	b2_get_upload_url: [require_auth.Capability.WriteFiles],
+	b2_get_upload_part_url: [require_auth.Capability.WriteFiles],
+	b2_upload_file: [require_auth.Capability.WriteFiles],
+	b2_upload_part: [require_auth.Capability.WriteFiles],
+	b2_start_large_file: [require_auth.Capability.WriteFiles],
+	b2_finish_large_file: [require_auth.Capability.WriteFiles],
+	b2_cancel_large_file: [require_auth.Capability.WriteFiles],
+	b2_copy_file: [require_auth.Capability.WriteFiles],
+	b2_copy_part: [require_auth.Capability.WriteFiles],
+	b2_list_file_names: [require_auth.Capability.ListFiles],
+	b2_list_file_versions: [require_auth.Capability.ListFiles],
+	b2_list_unfinished_large_files: [require_auth.Capability.ListFiles],
+	b2_list_parts: [require_auth.Capability.ListFiles],
+	b2_get_file_info: [require_auth.Capability.ReadFiles],
+	b2_download_file_by_id: [require_auth.Capability.ReadFiles],
+	b2_download_file_by_name: [require_auth.Capability.ReadFiles],
+	b2_hide_file: [require_auth.Capability.WriteFiles],
+	b2_delete_file_version: [require_auth.Capability.DeleteFiles],
+	b2_update_file_retention: [require_auth.Capability.WriteFileRetentions],
+	b2_update_file_legal_hold: [require_auth.Capability.WriteFileLegalHolds],
+	b2_create_key: [require_auth.Capability.WriteKeys],
+	b2_list_keys: [require_auth.Capability.ListKeys],
+	b2_delete_key: [require_auth.Capability.DeleteKeys],
+	b2_get_download_authorization: [require_auth.Capability.ShareFiles],
+	b2_get_bucket_notification_rules: [require_auth.Capability.ReadBucketNotifications],
+	b2_set_bucket_notification_rules: [require_auth.Capability.WriteBucketNotifications]
 };
+/**
+* Find which capabilities are missing from the caller's grant set
+* relative to the endpoint requirement.
+*
+* @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).
+* @param granted - Capabilities the caller's key has.
+*
+* @returns The subset of required capabilities that the caller is
+*   missing. Empty array means "request authorized".
+*/
 function missingCapabilitiesFor(endpoint, granted) {
-  const required = ENDPOINT_CAPABILITIES[endpoint] ?? [];
-  const grantedSet = new Set(granted);
-  return required.filter((cap) => !grantedSet.has(cap));
+	const required = ENDPOINT_CAPABILITIES[endpoint] ?? [];
+	const grantedSet = new Set(granted);
+	return required.filter((cap) => !grantedSet.has(cap));
 }
+//#endregion
 exports.ENDPOINT_CAPABILITIES = ENDPOINT_CAPABILITIES;
 exports.missingCapabilitiesFor = missingCapabilitiesFor;
-//# sourceMappingURL=capabilities.cjs.map
+
+//# sourceMappingURL=capabilities.cjs.map

package/dist/simulator/capabilities.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.cjs","sources":["../../src/simulator/capabilities.ts"],"sourcesContent":["/**\n * Capability requirement table mapping each B2 native API endpoint to\n * the capability (or capabilities — usually one) the caller's\n * application key must hold to invoke it. Used by `B2Simulator` when\n * `strictAuth: true` is set, so test code that exercises a restricted\n * key sees the same `403 unauthorized` response real B2 would return.\n *\n * Source: https://www.backblaze.com/apidocs (each endpoint page lists\n * the required capability in its description).\n *\n * @packageDocumentation\n */\n\nimport { Capability } from '../types/auth.ts'\n\n/** Endpoint → required capability(s). An empty array means \"no capability check\". */\nexport const ENDPOINT_CAPABILITIES: Record<string, readonly Capability[]> = {\n  // Auth endpoint takes credentials, not an auth token — no cap check.\n  b2_authorize_account: [],\n  // Bucket management.\n  b2_create_bucket: [Capability.WriteBuckets],\n  b2_delete_bucket: [Capability.DeleteBuckets],\n  b2_update_bucket: [Capability.WriteBuckets],\n  b2_list_buckets: [Capability.ListBuckets],\n  // File upload + URL acquisition.\n  b2_get_upload_url: [Capability.WriteFiles],\n  b2_get_upload_part_url: [Capability.WriteFiles],\n  b2_upload_file: [Capability.WriteFiles],\n  b2_upload_part: [Capability.WriteFiles],\n  b2_start_large_file: [Capability.WriteFiles],\n  b2_finish_large_file: [Capability.WriteFiles],\n  b2_cancel_large_file: [Capability.WriteFiles],\n  b2_copy_file: [Capability.WriteFiles],\n  b2_copy_part: [Capability.WriteFiles],\n  // File listing + reading.\n  b2_list_file_names: [Capability.ListFiles],\n  b2_list_file_versions: [Capability.ListFiles],\n  b2_list_unfinished_large_files: [Capability.ListFiles],\n  b2_list_parts: [Capability.ListFiles],\n  b2_get_file_info: [Capability.ReadFiles],\n  b2_download_file_by_id: [Capability.ReadFiles],\n  b2_download_file_by_name: [Capability.ReadFiles],\n  // File mutations.\n  b2_hide_file: [Capability.WriteFiles],\n  b2_delete_file_version: [Capability.DeleteFiles],\n  // Object lock + legal hold.\n  b2_update_file_retention: [Capability.WriteFileRetentions],\n  b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],\n  // Application keys.\n  b2_create_key: [Capability.WriteKeys],\n  b2_list_keys: [Capability.ListKeys],\n  b2_delete_key: [Capability.DeleteKeys],\n  // Download authorisation.\n  b2_get_download_authorization: [Capability.ShareFiles],\n  // Notification rules.\n  b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],\n  b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications],\n}\n\n/**\n * Find which capabilities are missing from the caller's grant set\n * relative to the endpoint requirement.\n *\n * @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).\n * @param granted - Capabilities the caller's key has.\n *\n * @returns The subset of required capabilities that the caller is\n *   missing. Empty array means \"request authorized\".\n */\nexport function missingCapabilitiesFor(\n  endpoint: string,\n  granted: readonly Capability[],\n): readonly Capability[] {\n  const required = ENDPOINT_CAPABILITIES[endpoint] ?? []\n  const grantedSet = new Set(granted)\n  return required.filter((cap) => !grantedSet.has(cap))\n}\n"],"names":["Capability"],"mappings":";;;AAgBO,MAAM,wBAA+D;AAAA;AAAA,EAE1E,sBAAsB,CAAA;AAAA;AAAA,EAEtB,kBAAkB,CAACA,KAAAA,WAAW,YAAY;AAAA,EAC1C,kBAAkB,CAACA,KAAAA,WAAW,aAAa;AAAA,EAC3C,kBAAkB,CAACA,KAAAA,WAAW,YAAY;AAAA,EAC1C,iBAAiB,CAACA,KAAAA,WAAW,WAAW;AAAA;AAAA,EAExC,mBAAmB,CAACA,KAAAA,WAAW,UAAU;AAAA,EACzC,wBAAwB,CAACA,KAAAA,WAAW,UAAU;AAAA,EAC9C,gBAAgB,CAACA,KAAAA,WAAW,UAAU;AAAA,EACtC,gBAAgB,CAACA,KAAAA,WAAW,UAAU;AAAA,EACtC,qBAAqB,CAACA,KAAAA,WAAW,UAAU;AAAA,EAC3C,sBAAsB,CAACA,KAAAA,WAAW,UAAU;AAAA,EAC5C,sBAAsB,CAACA,KAAAA,WAAW,UAAU;AAAA,EAC5C,cAAc,CAACA,KAAAA,WAAW,UAAU;AAAA,EACpC,cAAc,CAACA,KAAAA,WAAW,UAAU;AAAA;AAAA,EAEpC,oBAAoB,CAACA,KAAAA,WAAW,SAAS;AAAA,EACzC,uBAAuB,CAACA,KAAAA,WAAW,SAAS;AAAA,EAC5C,gCAAgC,CAACA,KAAAA,WAAW,SAAS;AAAA,EACrD,eAAe,CAACA,KAAAA,WAAW,SAAS;AAAA,EACpC,kBAAkB,CAACA,KAAAA,WAAW,SAAS;AAAA,EACvC,wBAAwB,CAACA,KAAAA,WAAW,SAAS;AAAA,EAC7C,0BAA0B,CAACA,KAAAA,WAAW,SAAS;AAAA;AAAA,EAE/C,cAAc,CAACA,KAAAA,WAAW,UAAU;AAAA,EACpC,wBAAwB,CAACA,KAAAA,WAAW,WAAW;AAAA;AAAA,EAE/C,0BAA0B,CAACA,KAAAA,WAAW,mBAAmB;AAAA,EACzD,2BAA2B,CAACA,KAAAA,WAAW,mBAAmB;AAAA;AAAA,EAE1D,eAAe,CAACA,KAAAA,WAAW,SAAS;AAAA,EACpC,cAAc,CAACA,KAAAA,WAAW,QAAQ;AAAA,EAClC,eAAe,CAACA,KAAAA,WAAW,UAAU;AAAA;AAAA,EAErC,+BAA+B,CAACA,KAAAA,WAAW,UAAU;AAAA;AAAA,EAErD,kCAAkC,CAACA,KAAAA,WAAW,uBAAuB;AAAA,EACrE,kCAAkC,CAACA,KAAAA,WAAW,wBAAwB;AACxE;AAYO,SAAS,uBACd,UACA,SACuB;AACvB,QAAM,WAAW,sBAAsB,QAAQ,KAAK,CAAA;AACpD,QAAM,aAAa,IAAI,IAAI,OAAO;AAClC,SAAO,SAAS,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC;AACtD;;;"}
+{"version":3,"file":"capabilities.cjs","names":[],"sources":["../../src/simulator/capabilities.ts"],"sourcesContent":["/**\n * Capability requirement table mapping each B2 native API endpoint to\n * the capability (or capabilities — usually one) the caller's\n * application key must hold to invoke it. Used by `B2Simulator` when\n * `strictAuth: true` is set, so test code that exercises a restricted\n * key sees the same `403 unauthorized` response real B2 would return.\n *\n * Source: https://www.backblaze.com/apidocs (each endpoint page lists\n * the required capability in its description).\n *\n * @packageDocumentation\n */\n\nimport { Capability } from '../types/auth.ts'\n\n/** Endpoint → required capability(s). An empty array means \"no capability check\". */\nexport const ENDPOINT_CAPABILITIES: Record<string, readonly Capability[]> = {\n  // Auth endpoint takes credentials, not an auth token — no cap check.\n  b2_authorize_account: [],\n  // Bucket management.\n  b2_create_bucket: [Capability.WriteBuckets],\n  b2_delete_bucket: [Capability.DeleteBuckets],\n  b2_update_bucket: [Capability.WriteBuckets],\n  b2_list_buckets: [Capability.ListBuckets],\n  // File upload + URL acquisition.\n  b2_get_upload_url: [Capability.WriteFiles],\n  b2_get_upload_part_url: [Capability.WriteFiles],\n  b2_upload_file: [Capability.WriteFiles],\n  b2_upload_part: [Capability.WriteFiles],\n  b2_start_large_file: [Capability.WriteFiles],\n  b2_finish_large_file: [Capability.WriteFiles],\n  b2_cancel_large_file: [Capability.WriteFiles],\n  b2_copy_file: [Capability.WriteFiles],\n  b2_copy_part: [Capability.WriteFiles],\n  // File listing + reading.\n  b2_list_file_names: [Capability.ListFiles],\n  b2_list_file_versions: [Capability.ListFiles],\n  b2_list_unfinished_large_files: [Capability.ListFiles],\n  b2_list_parts: [Capability.ListFiles],\n  b2_get_file_info: [Capability.ReadFiles],\n  b2_download_file_by_id: [Capability.ReadFiles],\n  b2_download_file_by_name: [Capability.ReadFiles],\n  // File mutations.\n  b2_hide_file: [Capability.WriteFiles],\n  b2_delete_file_version: [Capability.DeleteFiles],\n  // Object lock + legal hold.\n  b2_update_file_retention: [Capability.WriteFileRetentions],\n  b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],\n  // Application keys.\n  b2_create_key: [Capability.WriteKeys],\n  b2_list_keys: [Capability.ListKeys],\n  b2_delete_key: [Capability.DeleteKeys],\n  // Download authorisation.\n  b2_get_download_authorization: [Capability.ShareFiles],\n  // Notification rules.\n  b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],\n  b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications],\n}\n\n/**\n * Find which capabilities are missing from the caller's grant set\n * relative to the endpoint requirement.\n *\n * @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).\n * @param granted - Capabilities the caller's key has.\n *\n * @returns The subset of required capabilities that the caller is\n *   missing. Empty array means \"request authorized\".\n */\nexport function missingCapabilitiesFor(\n  endpoint: string,\n  granted: readonly Capability[],\n): readonly Capability[] {\n  const required = ENDPOINT_CAPABILITIES[endpoint] ?? []\n  const grantedSet = new Set(granted)\n  return required.filter((cap) => !grantedSet.has(cap))\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,IAAa,wBAA+D;CAE1E,sBAAsB,CAAC;CAEvB,kBAAkB,CAAC,aAAA,WAAW,YAAY;CAC1C,kBAAkB,CAAC,aAAA,WAAW,aAAa;CAC3C,kBAAkB,CAAC,aAAA,WAAW,YAAY;CAC1C,iBAAiB,CAAC,aAAA,WAAW,WAAW;CAExC,mBAAmB,CAAC,aAAA,WAAW,UAAU;CACzC,wBAAwB,CAAC,aAAA,WAAW,UAAU;CAC9C,gBAAgB,CAAC,aAAA,WAAW,UAAU;CACtC,gBAAgB,CAAC,aAAA,WAAW,UAAU;CACtC,qBAAqB,CAAC,aAAA,WAAW,UAAU;CAC3C,sBAAsB,CAAC,aAAA,WAAW,UAAU;CAC5C,sBAAsB,CAAC,aAAA,WAAW,UAAU;CAC5C,cAAc,CAAC,aAAA,WAAW,UAAU;CACpC,cAAc,CAAC,aAAA,WAAW,UAAU;CAEpC,oBAAoB,CAAC,aAAA,WAAW,SAAS;CACzC,uBAAuB,CAAC,aAAA,WAAW,SAAS;CAC5C,gCAAgC,CAAC,aAAA,WAAW,SAAS;CACrD,eAAe,CAAC,aAAA,WAAW,SAAS;CACpC,kBAAkB,CAAC,aAAA,WAAW,SAAS;CACvC,wBAAwB,CAAC,aAAA,WAAW,SAAS;CAC7C,0BAA0B,CAAC,aAAA,WAAW,SAAS;CAE/C,cAAc,CAAC,aAAA,WAAW,UAAU;CACpC,wBAAwB,CAAC,aAAA,WAAW,WAAW;CAE/C,0BAA0B,CAAC,aAAA,WAAW,mBAAmB;CACzD,2BAA2B,CAAC,aAAA,WAAW,mBAAmB;CAE1D,eAAe,CAAC,aAAA,WAAW,SAAS;CACpC,cAAc,CAAC,aAAA,WAAW,QAAQ;CAClC,eAAe,CAAC,aAAA,WAAW,UAAU;CAErC,+BAA+B,CAAC,aAAA,WAAW,UAAU;CAErD,kCAAkC,CAAC,aAAA,WAAW,uBAAuB;CACrE,kCAAkC,CAAC,aAAA,WAAW,wBAAwB;AACxE;;;;;;;;;;;AAYA,SAAgB,uBACd,UACA,SACuB;CACvB,MAAM,WAAW,sBAAsB,aAAa,CAAC;CACrD,MAAM,aAAa,IAAI,IAAI,OAAO;CAClC,OAAO,SAAS,QAAQ,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC;AACtD"}

package/dist/simulator/capabilities.js

@@ -1,53 +1,67 @@
 import { Capability } from "../types/auth.js";
-const ENDPOINT_CAPABILITIES = {
-  // Auth endpoint takes credentials, not an auth token — no cap check.
-  b2_authorize_account: [],
-  // Bucket management.
-  b2_create_bucket: [Capability.WriteBuckets],
-  b2_delete_bucket: [Capability.DeleteBuckets],
-  b2_update_bucket: [Capability.WriteBuckets],
-  b2_list_buckets: [Capability.ListBuckets],
-  // File upload + URL acquisition.
-  b2_get_upload_url: [Capability.WriteFiles],
-  b2_get_upload_part_url: [Capability.WriteFiles],
-  b2_upload_file: [Capability.WriteFiles],
-  b2_upload_part: [Capability.WriteFiles],
-  b2_start_large_file: [Capability.WriteFiles],
-  b2_finish_large_file: [Capability.WriteFiles],
-  b2_cancel_large_file: [Capability.WriteFiles],
-  b2_copy_file: [Capability.WriteFiles],
-  b2_copy_part: [Capability.WriteFiles],
-  // File listing + reading.
-  b2_list_file_names: [Capability.ListFiles],
-  b2_list_file_versions: [Capability.ListFiles],
-  b2_list_unfinished_large_files: [Capability.ListFiles],
-  b2_list_parts: [Capability.ListFiles],
-  b2_get_file_info: [Capability.ReadFiles],
-  b2_download_file_by_id: [Capability.ReadFiles],
-  b2_download_file_by_name: [Capability.ReadFiles],
-  // File mutations.
-  b2_hide_file: [Capability.WriteFiles],
-  b2_delete_file_version: [Capability.DeleteFiles],
-  // Object lock + legal hold.
-  b2_update_file_retention: [Capability.WriteFileRetentions],
-  b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],
-  // Application keys.
-  b2_create_key: [Capability.WriteKeys],
-  b2_list_keys: [Capability.ListKeys],
-  b2_delete_key: [Capability.DeleteKeys],
-  // Download authorisation.
-  b2_get_download_authorization: [Capability.ShareFiles],
-  // Notification rules.
-  b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],
-  b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications]
+//#region src/simulator/capabilities.ts
+/**
+* Capability requirement table mapping each B2 native API endpoint to
+* the capability (or capabilities — usually one) the caller's
+* application key must hold to invoke it. Used by `B2Simulator` when
+* `strictAuth: true` is set, so test code that exercises a restricted
+* key sees the same `403 unauthorized` response real B2 would return.
+*
+* Source: https://www.backblaze.com/apidocs (each endpoint page lists
+* the required capability in its description).
+*
+* @packageDocumentation
+*/
+/** Endpoint → required capability(s). An empty array means "no capability check". */
+var ENDPOINT_CAPABILITIES = {
+	b2_authorize_account: [],
+	b2_create_bucket: [Capability.WriteBuckets],
+	b2_delete_bucket: [Capability.DeleteBuckets],
+	b2_update_bucket: [Capability.WriteBuckets],
+	b2_list_buckets: [Capability.ListBuckets],
+	b2_get_upload_url: [Capability.WriteFiles],
+	b2_get_upload_part_url: [Capability.WriteFiles],
+	b2_upload_file: [Capability.WriteFiles],
+	b2_upload_part: [Capability.WriteFiles],
+	b2_start_large_file: [Capability.WriteFiles],
+	b2_finish_large_file: [Capability.WriteFiles],
+	b2_cancel_large_file: [Capability.WriteFiles],
+	b2_copy_file: [Capability.WriteFiles],
+	b2_copy_part: [Capability.WriteFiles],
+	b2_list_file_names: [Capability.ListFiles],
+	b2_list_file_versions: [Capability.ListFiles],
+	b2_list_unfinished_large_files: [Capability.ListFiles],
+	b2_list_parts: [Capability.ListFiles],
+	b2_get_file_info: [Capability.ReadFiles],
+	b2_download_file_by_id: [Capability.ReadFiles],
+	b2_download_file_by_name: [Capability.ReadFiles],
+	b2_hide_file: [Capability.WriteFiles],
+	b2_delete_file_version: [Capability.DeleteFiles],
+	b2_update_file_retention: [Capability.WriteFileRetentions],
+	b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],
+	b2_create_key: [Capability.WriteKeys],
+	b2_list_keys: [Capability.ListKeys],
+	b2_delete_key: [Capability.DeleteKeys],
+	b2_get_download_authorization: [Capability.ShareFiles],
+	b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],
+	b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications]
 };
+/**
+* Find which capabilities are missing from the caller's grant set
+* relative to the endpoint requirement.
+*
+* @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).
+* @param granted - Capabilities the caller's key has.
+*
+* @returns The subset of required capabilities that the caller is
+*   missing. Empty array means "request authorized".
+*/
 function missingCapabilitiesFor(endpoint, granted) {
-  const required = ENDPOINT_CAPABILITIES[endpoint] ?? [];
-  const grantedSet = new Set(granted);
-  return required.filter((cap) => !grantedSet.has(cap));
+	const required = ENDPOINT_CAPABILITIES[endpoint] ?? [];
+	const grantedSet = new Set(granted);
+	return required.filter((cap) => !grantedSet.has(cap));
 }
-export {
-  ENDPOINT_CAPABILITIES,
-  missingCapabilitiesFor
-};
-//# sourceMappingURL=capabilities.js.map
+//#endregion
+export { ENDPOINT_CAPABILITIES, missingCapabilitiesFor };
+
+//# sourceMappingURL=capabilities.js.map

package/dist/simulator/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sources":["../../src/simulator/capabilities.ts"],"sourcesContent":["/**\n * Capability requirement table mapping each B2 native API endpoint to\n * the capability (or capabilities — usually one) the caller's\n * application key must hold to invoke it. Used by `B2Simulator` when\n * `strictAuth: true` is set, so test code that exercises a restricted\n * key sees the same `403 unauthorized` response real B2 would return.\n *\n * Source: https://www.backblaze.com/apidocs (each endpoint page lists\n * the required capability in its description).\n *\n * @packageDocumentation\n */\n\nimport { Capability } from '../types/auth.ts'\n\n/** Endpoint → required capability(s). An empty array means \"no capability check\". */\nexport const ENDPOINT_CAPABILITIES: Record<string, readonly Capability[]> = {\n  // Auth endpoint takes credentials, not an auth token — no cap check.\n  b2_authorize_account: [],\n  // Bucket management.\n  b2_create_bucket: [Capability.WriteBuckets],\n  b2_delete_bucket: [Capability.DeleteBuckets],\n  b2_update_bucket: [Capability.WriteBuckets],\n  b2_list_buckets: [Capability.ListBuckets],\n  // File upload + URL acquisition.\n  b2_get_upload_url: [Capability.WriteFiles],\n  b2_get_upload_part_url: [Capability.WriteFiles],\n  b2_upload_file: [Capability.WriteFiles],\n  b2_upload_part: [Capability.WriteFiles],\n  b2_start_large_file: [Capability.WriteFiles],\n  b2_finish_large_file: [Capability.WriteFiles],\n  b2_cancel_large_file: [Capability.WriteFiles],\n  b2_copy_file: [Capability.WriteFiles],\n  b2_copy_part: [Capability.WriteFiles],\n  // File listing + reading.\n  b2_list_file_names: [Capability.ListFiles],\n  b2_list_file_versions: [Capability.ListFiles],\n  b2_list_unfinished_large_files: [Capability.ListFiles],\n  b2_list_parts: [Capability.ListFiles],\n  b2_get_file_info: [Capability.ReadFiles],\n  b2_download_file_by_id: [Capability.ReadFiles],\n  b2_download_file_by_name: [Capability.ReadFiles],\n  // File mutations.\n  b2_hide_file: [Capability.WriteFiles],\n  b2_delete_file_version: [Capability.DeleteFiles],\n  // Object lock + legal hold.\n  b2_update_file_retention: [Capability.WriteFileRetentions],\n  b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],\n  // Application keys.\n  b2_create_key: [Capability.WriteKeys],\n  b2_list_keys: [Capability.ListKeys],\n  b2_delete_key: [Capability.DeleteKeys],\n  // Download authorisation.\n  b2_get_download_authorization: [Capability.ShareFiles],\n  // Notification rules.\n  b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],\n  b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications],\n}\n\n/**\n * Find which capabilities are missing from the caller's grant set\n * relative to the endpoint requirement.\n *\n * @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).\n * @param granted - Capabilities the caller's key has.\n *\n * @returns The subset of required capabilities that the caller is\n *   missing. Empty array means \"request authorized\".\n */\nexport function missingCapabilitiesFor(\n  endpoint: string,\n  granted: readonly Capability[],\n): readonly Capability[] {\n  const required = ENDPOINT_CAPABILITIES[endpoint] ?? []\n  const grantedSet = new Set(granted)\n  return required.filter((cap) => !grantedSet.has(cap))\n}\n"],"names":[],"mappings":";AAgBO,MAAM,wBAA+D;AAAA;AAAA,EAE1E,sBAAsB,CAAA;AAAA;AAAA,EAEtB,kBAAkB,CAAC,WAAW,YAAY;AAAA,EAC1C,kBAAkB,CAAC,WAAW,aAAa;AAAA,EAC3C,kBAAkB,CAAC,WAAW,YAAY;AAAA,EAC1C,iBAAiB,CAAC,WAAW,WAAW;AAAA;AAAA,EAExC,mBAAmB,CAAC,WAAW,UAAU;AAAA,EACzC,wBAAwB,CAAC,WAAW,UAAU;AAAA,EAC9C,gBAAgB,CAAC,WAAW,UAAU;AAAA,EACtC,gBAAgB,CAAC,WAAW,UAAU;AAAA,EACtC,qBAAqB,CAAC,WAAW,UAAU;AAAA,EAC3C,sBAAsB,CAAC,WAAW,UAAU;AAAA,EAC5C,sBAAsB,CAAC,WAAW,UAAU;AAAA,EAC5C,cAAc,CAAC,WAAW,UAAU;AAAA,EACpC,cAAc,CAAC,WAAW,UAAU;AAAA;AAAA,EAEpC,oBAAoB,CAAC,WAAW,SAAS;AAAA,EACzC,uBAAuB,CAAC,WAAW,SAAS;AAAA,EAC5C,gCAAgC,CAAC,WAAW,SAAS;AAAA,EACrD,eAAe,CAAC,WAAW,SAAS;AAAA,EACpC,kBAAkB,CAAC,WAAW,SAAS;AAAA,EACvC,wBAAwB,CAAC,WAAW,SAAS;AAAA,EAC7C,0BAA0B,CAAC,WAAW,SAAS;AAAA;AAAA,EAE/C,cAAc,CAAC,WAAW,UAAU;AAAA,EACpC,wBAAwB,CAAC,WAAW,WAAW;AAAA;AAAA,EAE/C,0BAA0B,CAAC,WAAW,mBAAmB;AAAA,EACzD,2BAA2B,CAAC,WAAW,mBAAmB;AAAA;AAAA,EAE1D,eAAe,CAAC,WAAW,SAAS;AAAA,EACpC,cAAc,CAAC,WAAW,QAAQ;AAAA,EAClC,eAAe,CAAC,WAAW,UAAU;AAAA;AAAA,EAErC,+BAA+B,CAAC,WAAW,UAAU;AAAA;AAAA,EAErD,kCAAkC,CAAC,WAAW,uBAAuB;AAAA,EACrE,kCAAkC,CAAC,WAAW,wBAAwB;AACxE;AAYO,SAAS,uBACd,UACA,SACuB;AACvB,QAAM,WAAW,sBAAsB,QAAQ,KAAK,CAAA;AACpD,QAAM,aAAa,IAAI,IAAI,OAAO;AAClC,SAAO,SAAS,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC;AACtD;"}
+{"version":3,"file":"capabilities.js","names":[],"sources":["../../src/simulator/capabilities.ts"],"sourcesContent":["/**\n * Capability requirement table mapping each B2 native API endpoint to\n * the capability (or capabilities — usually one) the caller's\n * application key must hold to invoke it. Used by `B2Simulator` when\n * `strictAuth: true` is set, so test code that exercises a restricted\n * key sees the same `403 unauthorized` response real B2 would return.\n *\n * Source: https://www.backblaze.com/apidocs (each endpoint page lists\n * the required capability in its description).\n *\n * @packageDocumentation\n */\n\nimport { Capability } from '../types/auth.ts'\n\n/** Endpoint → required capability(s). An empty array means \"no capability check\". */\nexport const ENDPOINT_CAPABILITIES: Record<string, readonly Capability[]> = {\n  // Auth endpoint takes credentials, not an auth token — no cap check.\n  b2_authorize_account: [],\n  // Bucket management.\n  b2_create_bucket: [Capability.WriteBuckets],\n  b2_delete_bucket: [Capability.DeleteBuckets],\n  b2_update_bucket: [Capability.WriteBuckets],\n  b2_list_buckets: [Capability.ListBuckets],\n  // File upload + URL acquisition.\n  b2_get_upload_url: [Capability.WriteFiles],\n  b2_get_upload_part_url: [Capability.WriteFiles],\n  b2_upload_file: [Capability.WriteFiles],\n  b2_upload_part: [Capability.WriteFiles],\n  b2_start_large_file: [Capability.WriteFiles],\n  b2_finish_large_file: [Capability.WriteFiles],\n  b2_cancel_large_file: [Capability.WriteFiles],\n  b2_copy_file: [Capability.WriteFiles],\n  b2_copy_part: [Capability.WriteFiles],\n  // File listing + reading.\n  b2_list_file_names: [Capability.ListFiles],\n  b2_list_file_versions: [Capability.ListFiles],\n  b2_list_unfinished_large_files: [Capability.ListFiles],\n  b2_list_parts: [Capability.ListFiles],\n  b2_get_file_info: [Capability.ReadFiles],\n  b2_download_file_by_id: [Capability.ReadFiles],\n  b2_download_file_by_name: [Capability.ReadFiles],\n  // File mutations.\n  b2_hide_file: [Capability.WriteFiles],\n  b2_delete_file_version: [Capability.DeleteFiles],\n  // Object lock + legal hold.\n  b2_update_file_retention: [Capability.WriteFileRetentions],\n  b2_update_file_legal_hold: [Capability.WriteFileLegalHolds],\n  // Application keys.\n  b2_create_key: [Capability.WriteKeys],\n  b2_list_keys: [Capability.ListKeys],\n  b2_delete_key: [Capability.DeleteKeys],\n  // Download authorisation.\n  b2_get_download_authorization: [Capability.ShareFiles],\n  // Notification rules.\n  b2_get_bucket_notification_rules: [Capability.ReadBucketNotifications],\n  b2_set_bucket_notification_rules: [Capability.WriteBucketNotifications],\n}\n\n/**\n * Find which capabilities are missing from the caller's grant set\n * relative to the endpoint requirement.\n *\n * @param endpoint - B2 endpoint name (e.g. `'b2_upload_file'`).\n * @param granted - Capabilities the caller's key has.\n *\n * @returns The subset of required capabilities that the caller is\n *   missing. Empty array means \"request authorized\".\n */\nexport function missingCapabilitiesFor(\n  endpoint: string,\n  granted: readonly Capability[],\n): readonly Capability[] {\n  const required = ENDPOINT_CAPABILITIES[endpoint] ?? []\n  const grantedSet = new Set(granted)\n  return required.filter((cap) => !grantedSet.has(cap))\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,IAAa,wBAA+D;CAE1E,sBAAsB,CAAC;CAEvB,kBAAkB,CAAC,WAAW,YAAY;CAC1C,kBAAkB,CAAC,WAAW,aAAa;CAC3C,kBAAkB,CAAC,WAAW,YAAY;CAC1C,iBAAiB,CAAC,WAAW,WAAW;CAExC,mBAAmB,CAAC,WAAW,UAAU;CACzC,wBAAwB,CAAC,WAAW,UAAU;CAC9C,gBAAgB,CAAC,WAAW,UAAU;CACtC,gBAAgB,CAAC,WAAW,UAAU;CACtC,qBAAqB,CAAC,WAAW,UAAU;CAC3C,sBAAsB,CAAC,WAAW,UAAU;CAC5C,sBAAsB,CAAC,WAAW,UAAU;CAC5C,cAAc,CAAC,WAAW,UAAU;CACpC,cAAc,CAAC,WAAW,UAAU;CAEpC,oBAAoB,CAAC,WAAW,SAAS;CACzC,uBAAuB,CAAC,WAAW,SAAS;CAC5C,gCAAgC,CAAC,WAAW,SAAS;CACrD,eAAe,CAAC,WAAW,SAAS;CACpC,kBAAkB,CAAC,WAAW,SAAS;CACvC,wBAAwB,CAAC,WAAW,SAAS;CAC7C,0BAA0B,CAAC,WAAW,SAAS;CAE/C,cAAc,CAAC,WAAW,UAAU;CACpC,wBAAwB,CAAC,WAAW,WAAW;CAE/C,0BAA0B,CAAC,WAAW,mBAAmB;CACzD,2BAA2B,CAAC,WAAW,mBAAmB;CAE1D,eAAe,CAAC,WAAW,SAAS;CACpC,cAAc,CAAC,WAAW,QAAQ;CAClC,eAAe,CAAC,WAAW,UAAU;CAErC,+BAA+B,CAAC,WAAW,UAAU;CAErD,kCAAkC,CAAC,WAAW,uBAAuB;CACrE,kCAAkC,CAAC,WAAW,wBAAwB;AACxE;;;;;;;;;;;AAYA,SAAgB,uBACd,UACA,SACuB;CACvB,MAAM,WAAW,sBAAsB,aAAa,CAAC;CACrD,MAAM,aAAa,IAAI,IAAI,OAAO;CAClC,OAAO,SAAS,QAAQ,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC;AACtD"}