@backblaze-labs/b2-sdk 0.2.0 → 0.3.0

package/dist/object.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"object.cjs","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 8 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,cAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,gBAAA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,gBAAA,uBAAuB,OAAO;EACnD,OAAO,iBAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAA,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,eAAA,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,eAAA,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,eAAA,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAQ4B;EAC5B,OAAO,iBAAA,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,eAAA,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}
+{"version":3,"file":"object.cjs","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,cAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,gBAAA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,gBAAA,uBAAuB,OAAO;EACnD,OAAO,iBAAA,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAA,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,eAAA,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,eAAA,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,eAAA,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,iBAAA,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,6BAAA,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,eAAA,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}

package/dist/object.d.cts

@@ -135,15 +135,17 @@ export declare class B2Object {
      * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.
      * @param fileId - The file version ID to download.
      * @param totalSize - Total file size in bytes (needed to compute range boundaries).
-     * @param options - Concurrency, range size, and abort signal.
+     * @param options - Concurrency, range size, SSE-C decryption, and abort signal.
      *
      * @returns A Web ReadableStream of file data in sequential order.
      */
     createReadStream(fileId: FileId, totalSize: number, options?: {
-        /** Size of each ranged GET request in bytes. Defaults to 8 MB. */
+        /** Size of each ranged GET request in bytes. Defaults to 10 MB. */
         rangeSize?: number;
         /** Number of concurrent range requests. Defaults to 4. */
         concurrency?: number;
+        /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */
+        serverSideEncryption?: SseCDownloadKey;
         /** Abort signal for cancelling the download. */
         signal?: AbortSignal;
     }): ReadableStream<Uint8Array>;

package/dist/object.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}
+{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}

package/dist/object.d.ts

@@ -135,15 +135,17 @@ export declare class B2Object {
      * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.
      * @param fileId - The file version ID to download.
      * @param totalSize - Total file size in bytes (needed to compute range boundaries).
-     * @param options - Concurrency, range size, and abort signal.
+     * @param options - Concurrency, range size, SSE-C decryption, and abort signal.
      *
      * @returns A Web ReadableStream of file data in sequential order.
      */
     createReadStream(fileId: FileId, totalSize: number, options?: {
-        /** Size of each ranged GET request in bytes. Defaults to 8 MB. */
+        /** Size of each ranged GET request in bytes. Defaults to 10 MB. */
         rangeSize?: number;
         /** Number of concurrent range requests. Defaults to 4. */
         concurrency?: number;
+        /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */
+        serverSideEncryption?: SseCDownloadKey;
         /** Abort signal for cancelling the download. */
         signal?: AbortSignal;
     }): ReadableStream<Uint8Array>;

package/dist/object.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}
+{"version":3,"file":"object.d.ts","sourceRoot":"","sources":["../src/object.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEzE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAGhC,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsB9E,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAChC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,eAAe,CAAA;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IAEjD;;;;;;;OAOG;gBAED,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,YAAY;IAQlC;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;YAgCpD,oBAAoB;IAOlC;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQtE;;;;;;;;;;OAUG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ1D;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAO1F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9E;;;;;;;OAOG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,0DAA0D;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,iFAAiF;QACjF,oBAAoB,CAAC,EAAE,eAAe,CAAA;QACtC,gDAAgD;QAChD,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GACA,cAAc,CAAC,UAAU,CAAC;IAQ7B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,iBAAiB;IAU1E;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQvD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlC;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,kBAAkB,EAC7B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAK1C;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc;CAG7D"}

package/dist/object.js

@@ -155,7 +155,7 @@ var B2Object = class {
 	* Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.
 	* @param fileId - The file version ID to download.
 	* @param totalSize - Total file size in bytes (needed to compute range boundaries).
-	* @param options - Concurrency, range size, and abort signal.
+	* @param options - Concurrency, range size, SSE-C decryption, and abort signal.
 	*
 	* @returns A Web ReadableStream of file data in sequential order.
 	*/

package/dist/object.js.map

@@ -1 +1 @@
-{"version":3,"file":"object.js","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 8 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,uBAAuB,OAAO;EACnD,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAQ4B;EAC5B,OAAO,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}
+{"version":3,"file":"object.js","names":[],"sources":["../src/object.ts"],"sourcesContent":["import type { Bucket } from './bucket.ts'\nimport type { B2Client } from './client.ts'\nimport { createParallelDownloadStream } from './download/parallel.ts'\nimport {\n  type DownloadResult,\n  downloadById,\n  downloadByName,\n  type HeadResult,\n  headById,\n  headByName,\n} from './download/single.ts'\nimport type { RetryOptions } from './http/retry.ts'\nimport { mergeUploadRetryOptions } from './internal/upload-retry-options.ts'\nimport type { SseCDownloadKey } from './raw/index.ts'\nimport type { ProgressListener } from './streams/progress.ts'\nimport type { BucketRetentionPolicy } from './types/bucket.ts'\nimport type { FileVersion } from './types/file.ts'\nimport type { FileId } from './types/ids.ts'\nimport type { FileRetentionValue, LegalHoldValue } from './types/lock.ts'\nimport { uploadLargeFile } from './upload/large.ts'\nimport {\n  type B2ObjectUploadOptions,\n  type B2ObjectWriteStreamOptions,\n  rejectSmallResumeFileId,\n  stripResumeOnlyOptions,\n} from './upload/options.ts'\nimport { uploadSmallFile } from './upload/single.ts'\nimport { createWriteStream, type UploadWriteHandle } from './upload/stream.ts'\n\ninterface BucketDefaultRetentionSnapshot {\n  readonly retention?: BucketRetentionPolicy\n  readonly unreadable: boolean\n}\n\nfunction bucketDefaultRetentionSnapshot(info: Bucket['info']): BucketDefaultRetentionSnapshot {\n  const fileLock = info.fileLockConfiguration\n  if (!fileLock.isClientAuthorizedToRead) return { unreadable: true }\n  if (fileLock.value === null) return { unreadable: false }\n  return { retention: fileLock.value.defaultRetention, unreadable: false }\n}\n\nfunction resumeNeedsFreshBucketDefaults(options: B2ObjectUploadOptions): boolean {\n  const resumeRequested = options.resume === true || options.resumeFileId !== undefined\n  return (\n    resumeRequested &&\n    (options.serverSideEncryption === undefined || options.fileRetention === undefined)\n  )\n}\n\n/** Options accepted by {@link B2Object.download} and {@link B2Object.downloadById}. */\nexport interface DownloadCallOptions {\n  /**\n   * HTTP method. Defaults to `'GET'`. Use `'HEAD'` to fetch only\n   * response headers. Prefer the dedicated {@link B2Object.head} /\n   * {@link Bucket.head} method over this option — those return a\n   * body-less result so callers never have to remember to drain the\n   * empty body of a HEAD response.\n   */\n  readonly method?: 'GET' | 'HEAD'\n  /** HTTP Range header value (e.g., `\"bytes=0-999\"`). */\n  readonly range?: string\n  /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n  readonly serverSideEncryption?: SseCDownloadKey\n  /** Override the response `Content-Disposition` header. */\n  readonly b2ContentDisposition?: string\n  /** Override the response `Content-Language` header. */\n  readonly b2ContentLanguage?: string\n  /** Override the response `Content-Encoding` header. */\n  readonly b2ContentEncoding?: string\n  /** Override the response `Content-Type` header. */\n  readonly b2ContentType?: string\n  /** Override the response `Cache-Control` header. */\n  readonly b2CacheControl?: string\n  /** Override the response `Expires` header. */\n  readonly b2Expires?: string\n  /** Abort signal for cancelling the download. */\n  readonly signal?: AbortSignal\n  /**\n   * Callback invoked as the response body is consumed.\n   *\n   * Progress is byte-driven, not request-driven: the callback fires per\n   * chunk as the caller reads the returned `body` stream, and the final\n   * `partsCompleted: 1` event only fires once the stream is read to\n   * completion. Downloads that are dropped or aborted partway through\n   * will NOT emit a `completePart()` event.\n   */\n  readonly onProgress?: ProgressListener\n}\n\n/**\n * Options accepted by {@link B2Object.head} / {@link Bucket.head}.\n * Same shape as {@link DownloadCallOptions} minus `method` (always\n * HEAD) and `onProgress` (no body to track).\n */\nexport type HeadCallOptions = Omit<DownloadCallOptions, 'method' | 'onProgress'>\n\n/**\n * Handle to a specific file (by name) within a B2 bucket.\n *\n * Provides file-scoped upload, download, and management operations.\n * Obtained via {@link Bucket.file}.\n *\n * @example\n * ```ts\n * const obj = bucket.file('photos/2026/sunset.jpg')\n * await obj.upload({ source: new BufferSource(data) })\n * const result = await obj.download()\n * ```\n */\nexport class B2Object {\n  /** The file name (path) within the bucket. */\n  readonly fileName: string\n  private readonly client: B2Client\n  private readonly bucket: Bucket\n  private readonly uploadRetryOptions: RetryOptions\n\n  /**\n   * @param client - The parent B2Client instance.\n   * @param bucket - The parent Bucket this object belongs to.\n   * @param fileName - The file path within the bucket.\n   * @param uploadRetryOptions - Resolved client upload retry defaults.\n   *\n   * @internal\n   */\n  constructor(\n    client: B2Client,\n    bucket: Bucket,\n    fileName: string,\n    uploadRetryOptions: RetryOptions,\n  ) {\n    this.client = client\n    this.bucket = bucket\n    this.fileName = fileName\n    this.uploadRetryOptions = uploadRetryOptions\n  }\n\n  /**\n   * Uploads data to this file name. Automatically uses multipart upload for large files.\n   * @param options - Upload configuration including data source and optional settings.\n   *\n   * @returns Metadata for the uploaded file version.\n   */\n  async upload(options: B2ObjectUploadOptions): Promise<FileVersion> {\n    const recommendedPartSize = this.client.accountInfo.getRecommendedPartSize()\n    const isLarge = options.source.size > recommendedPartSize\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options.retry)\n\n    if (isLarge) {\n      const bucketInfo = resumeNeedsFreshBucketDefaults(options)\n        ? await this.fetchFreshBucketInfo()\n        : this.bucket.info\n      const bucketDefaultRetention = bucketDefaultRetentionSnapshot(bucketInfo)\n      return uploadLargeFile(this.client.raw, this.client.accountInfo, {\n        ...options,\n        bucketId: this.bucket.id,\n        fileName: this.fileName,\n        retry: uploadRetryOptions,\n        bucketDefaultServerSideEncryption: bucketInfo.defaultServerSideEncryption,\n        ...(bucketDefaultRetention.retention !== undefined\n          ? { bucketDefaultRetention: bucketDefaultRetention.retention }\n          : {}),\n        ...(bucketDefaultRetention.unreadable ? { bucketDefaultRetentionUnreadable: true } : {}),\n      })\n    }\n    rejectSmallResumeFileId(options, 'B2Object.upload')\n    const smallOptions = stripResumeOnlyOptions(options)\n    return uploadSmallFile(this.client.raw, this.client.accountInfo, {\n      ...smallOptions,\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  private async fetchFreshBucketInfo(): Promise<Bucket['info']> {\n    const fresh = await this.client.listBuckets({ bucketId: this.bucket.id })\n    const found = fresh[0]\n    if (!found) throw new Error(`Bucket ${this.bucket.id} not found`)\n    return found.info\n  }\n\n  /**\n   * Downloads this file by name. Pass `method: 'HEAD'` to fetch only the\n   * response headers (file metadata) without streaming the body.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async download(options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for this file via HTTP HEAD. Returns a\n   * body-less result so callers never have to drain the (logically\n   * empty) HEAD body themselves.\n   *\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal. Same shape as {@link B2Object.download}'s\n   *   options minus `method` (always HEAD) and `onProgress` (no body).\n   *\n   * @returns Parsed download headers (content type, SHA-1, file info, etc.).\n   */\n  async head(options?: HeadCallOptions): Promise<HeadResult> {\n    return headByName(this.client.raw, this.client.accountInfo, {\n      bucketName: this.bucket.name,\n      fileName: this.fileName,\n      ...options,\n    })\n  }\n\n  /**\n   * Downloads a specific version of this file by ID. Pass `method: 'HEAD'`\n   * to fetch only the response headers (file metadata) without streaming the body.\n   * @param fileId - The file version ID to download.\n   * @param options - Optional method, range, SSE-C decryption, response-header overrides, and abort signal.\n   *\n   * @returns The download result with response headers and body stream.\n   */\n  async downloadById(fileId: FileId, options?: DownloadCallOptions): Promise<DownloadResult> {\n    return downloadById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Fetches response headers for a specific version of this file by ID\n   * via HTTP HEAD. Returns a body-less result so callers never have to\n   * drain the (logically empty) HEAD body themselves.\n   *\n   * @param fileId - The file version ID to inspect.\n   * @param options - Optional range, SSE-C decryption, response-header\n   *   overrides, and abort signal.\n   *\n   * @returns Parsed download headers.\n   */\n  async headById(fileId: FileId, options?: HeadCallOptions): Promise<HeadResult> {\n    return headById(this.client.raw, this.client.accountInfo, {\n      fileId,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a parallel-download ReadableStream that fetches the file in concurrent ranged chunks.\n   * @param fileId - The file version ID to download.\n   * @param totalSize - Total file size in bytes (needed to compute range boundaries).\n   * @param options - Concurrency, range size, SSE-C decryption, and abort signal.\n   *\n   * @returns A Web ReadableStream of file data in sequential order.\n   */\n  createReadStream(\n    fileId: FileId,\n    totalSize: number,\n    options?: {\n      /** Size of each ranged GET request in bytes. Defaults to 10 MB. */\n      rangeSize?: number\n      /** Number of concurrent range requests. Defaults to 4. */\n      concurrency?: number\n      /** SSE-C decryption parameters, required if the file was uploaded with SSE-C. */\n      serverSideEncryption?: SseCDownloadKey\n      /** Abort signal for cancelling the download. */\n      signal?: AbortSignal\n    },\n  ): ReadableStream<Uint8Array> {\n    return createParallelDownloadStream(this.client.raw, this.client.accountInfo, {\n      fileId,\n      totalSize,\n      ...options,\n    })\n  }\n\n  /**\n   * Creates a Web `WritableStream` that uploads streamed data into this file\n   * using the multipart protocol. Pipe a `ReadableStream<Uint8Array>` into the\n   * returned `writable` and await `done` to get the final {@link FileVersion}.\n   *\n   * Note: streaming uploads do not support resume because the size and per-part\n   * hashes are not known in advance. Use {@link upload} with a buffered source\n   * when resume is required.\n   *\n   * @param options - Streaming upload parameters (part size, concurrency, encryption).\n   *\n   * @returns A handle with the writable sink and a completion promise.\n   */\n  createWriteStream(options?: B2ObjectWriteStreamOptions): UploadWriteHandle {\n    const uploadRetryOptions = mergeUploadRetryOptions(this.uploadRetryOptions, options?.retry)\n    return createWriteStream(this.client.raw, this.client.accountInfo, {\n      ...(options ?? {}),\n      bucketId: this.bucket.id,\n      fileName: this.fileName,\n      retry: uploadRetryOptions,\n    })\n  }\n\n  /**\n   * Retrieves metadata for a specific file version.\n   * @param fileId - The file version ID to look up.\n   *\n   * @returns The file version metadata.\n   */\n  async getFileInfo(fileId: FileId): Promise<FileVersion> {\n    return this.client.raw.getFileInfo(\n      this.client.accountInfo.getApiUrl(),\n      this.client.accountInfo.getAuthToken(),\n      { fileId },\n    )\n  }\n\n  /**\n   * Hides this file by creating a hide marker at this file name.\n   *\n   * @returns Metadata for the newly created hide marker.\n   */\n  async hide(): Promise<FileVersion> {\n    return this.bucket.hideFile(this.fileName)\n  }\n\n  /**\n   * Permanently deletes a specific version of this file.\n   * @param fileId - The unique identifier of the file version to delete.\n   */\n  async deleteVersion(fileId: FileId): Promise<void> {\n    await this.bucket.deleteFileVersion(this.fileName, fileId)\n  }\n\n  /**\n   * Sets or updates the Object Lock retention policy on a specific file\n   * version of this file.\n   *\n   * The bucket must have Object Lock enabled (`fileLockEnabled: true` at\n   * creation time). Governance-mode retention can be shortened or removed\n   * by passing `bypassGovernance: true` together with an application key\n   * that carries the `bypassGovernance` capability; compliance-mode\n   * retention cannot be shortened by anyone until the\n   * `retainUntilTimestamp` elapses.\n   *\n   * @param fileId - The file version to apply the policy to.\n   * @param retention - The retention policy to apply.\n   * @param options - Optional flag for shortening governance-mode retention.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setRetention(\n    fileId: FileId,\n    retention: FileRetentionValue,\n    options?: { bypassGovernance?: boolean },\n  ) {\n    return this.bucket.updateFileRetention(this.fileName, fileId, retention, options)\n  }\n\n  /**\n   * Toggles the legal hold flag on a specific file version of this file.\n   *\n   * Legal hold is independent of retention: a file can be on legal hold\n   * without any retention policy, and vice versa. The bucket must have\n   * Object Lock enabled, and any caller must hold the `writeFileLegalHolds`\n   * capability.\n   *\n   * @param fileId - The file version to apply the flag to.\n   * @param legalHold - `'on'` to apply the hold, `'off'` to remove it.\n   *\n   * @returns Metadata for the updated file version.\n   */\n  async setLegalHold(fileId: FileId, legalHold: LegalHoldValue) {\n    return this.bucket.updateFileLegalHold(this.fileName, fileId, legalHold)\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,SAAS,+BAA+B,MAAsD;CAC5F,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,SAAS,0BAA0B,OAAO,EAAE,YAAY,KAAK;CAClE,IAAI,SAAS,UAAU,MAAM,OAAO,EAAE,YAAY,MAAM;CACxD,OAAO;EAAE,WAAW,SAAS,MAAM;EAAkB,YAAY;CAAM;AACzE;AAEA,SAAS,+BAA+B,SAAyC;CAE/E,QADwB,QAAQ,WAAW,QAAQ,QAAQ,iBAAiB,KAAA,OAGzE,QAAQ,yBAAyB,KAAA,KAAa,QAAQ,kBAAkB,KAAA;AAE7E;;;;;;;;;;;;;;AA8DA,IAAa,WAAb,MAAsB;;CAEpB;CACA;CACA;CACA;;;;;;;;;CAUA,YACE,QACA,QACA,UACA,oBACA;EACA,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,WAAW;EAChB,KAAK,qBAAqB;CAC5B;;;;;;;CAQA,MAAM,OAAO,SAAsD;EACjE,MAAM,sBAAsB,KAAK,OAAO,YAAY,uBAAuB;EAC3E,MAAM,UAAU,QAAQ,OAAO,OAAO;EACtC,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,QAAQ,KAAK;EAEzF,IAAI,SAAS;GACX,MAAM,aAAa,+BAA+B,OAAO,IACrD,MAAM,KAAK,qBAAqB,IAChC,KAAK,OAAO;GAChB,MAAM,yBAAyB,+BAA+B,UAAU;GACxE,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;IAC/D,GAAG;IACH,UAAU,KAAK,OAAO;IACtB,UAAU,KAAK;IACf,OAAO;IACP,mCAAmC,WAAW;IAC9C,GAAI,uBAAuB,cAAc,KAAA,IACrC,EAAE,wBAAwB,uBAAuB,UAAU,IAC3D,CAAC;IACL,GAAI,uBAAuB,aAAa,EAAE,kCAAkC,KAAK,IAAI,CAAC;GACxF,CAAC;EACH;EACA,wBAAwB,SAAS,iBAAiB;EAClD,MAAM,eAAe,uBAAuB,OAAO;EACnD,OAAO,gBAAgB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC/D,GAAG;GACH,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;CAEA,MAAc,uBAAgD;EAE5D,MAAM,SAAQ,MADM,KAAK,OAAO,YAAY,EAAE,UAAU,KAAK,OAAO,GAAG,CAAC,EAAA,CACpD;EACpB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,UAAU,KAAK,OAAO,GAAG,WAAW;EAChE,OAAO,MAAM;CACf;;;;;;;;CASA,MAAM,SAAS,SAAwD;EACrE,OAAO,eAAe,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC9D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAgD;EACzD,OAAO,WAAW,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC1D,YAAY,KAAK,OAAO;GACxB,UAAU,KAAK;GACf,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,MAAM,aAAa,QAAgB,SAAwD;EACzF,OAAO,aAAa,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5D;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,SAAS,QAAgB,SAAgD;EAC7E,OAAO,SAAS,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACxD;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;CAUA,iBACE,QACA,WACA,SAU4B;EAC5B,OAAO,6BAA6B,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GAC5E;GACA;GACA,GAAG;EACL,CAAC;CACH;;;;;;;;;;;;;;CAeA,kBAAkB,SAAyD;EACzE,MAAM,qBAAqB,wBAAwB,KAAK,oBAAoB,SAAS,KAAK;EAC1F,OAAO,kBAAkB,KAAK,OAAO,KAAK,KAAK,OAAO,aAAa;GACjE,GAAI,WAAW,CAAC;GAChB,UAAU,KAAK,OAAO;GACtB,UAAU,KAAK;GACf,OAAO;EACT,CAAC;CACH;;;;;;;CAQA,MAAM,YAAY,QAAsC;EACtD,OAAO,KAAK,OAAO,IAAI,YACrB,KAAK,OAAO,YAAY,UAAU,GAClC,KAAK,OAAO,YAAY,aAAa,GACrC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,OAA6B;EACjC,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ;CAC3C;;;;;CAMA,MAAM,cAAc,QAA+B;EACjD,MAAM,KAAK,OAAO,kBAAkB,KAAK,UAAU,MAAM;CAC3D;;;;;;;;;;;;;;;;;;CAmBA,MAAM,aACJ,QACA,WACA,SACA;EACA,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,WAAW,OAAO;CAClF;;;;;;;;;;;;;;CAeA,MAAM,aAAa,QAAgB,WAA2B;EAC5D,OAAO,KAAK,OAAO,oBAAoB,KAAK,UAAU,QAAQ,SAAS;CACzE;AACF"}

package/dist/partner/account-info.d.cts

@@ -0,0 +1,43 @@
+import { AccountId, PartnerToken } from '../types/ids.js';
+import { PartnerAuthorizeResponse, PartnerCapability } from '../types/partner.js';
+/**
+ * Stores Partner API and Computer Backup authorization state between requests.
+ *
+ * Reauthorization follows the storage client's `RetryTransport.onReauth`
+ * contract: re-run `PartnerRawClient.authorizePartner` with the same Master
+ * Application Key credentials, store the fresh response with `setAuth`, then
+ * return `authorizationToken` to the retry transport.
+ *
+ * Partner authorize responses redact `authorizationToken` when passed to
+ * `JSON.stringify`, so do not persist `getAuth()` with direct JSON serialization.
+ * For trusted durable caches, serialize the output of
+ * `partnerAuthorizeResponseForPersistence(getAuth())` into encrypted or
+ * otherwise credential-grade storage, or store `authorizationToken` directly in
+ * secure storage with the rest of the authorize response metadata.
+ */
+export interface PartnerAccountInfo {
+    /** Store a fresh Partner authorization response, replacing any previous state. */
+    setAuth(auth: PartnerAuthorizeResponse): void;
+    /**
+     * Return the current Partner authorization response, or null if not authorized.
+     *
+     * The returned object remains directly reusable with `setAuth()`, but
+     * `JSON.stringify` redacts its token and is not a persistence format.
+     */
+    getAuth(): PartnerAuthorizeResponse | null;
+    /** Discard all cached Partner authorization state. */
+    clear(): void;
+    /** Current Partner/Backup authorization token. */
+    getPartnerToken(): PartnerToken;
+    /** Base URL for Partner API calls, or null when the suite is unavailable. */
+    getGroupsApiUrl(): string | null;
+    /** Base URL for Computer Backup API calls, or null when the suite is unavailable. */
+    getBackupApiUrl(): string | null;
+    /** The authorized partner administrator account ID. */
+    getAccountId(): AccountId;
+    /** Capabilities granted for Partner API calls, or null when the suite is unavailable. */
+    getGroupsCapabilities(): readonly PartnerCapability[] | null;
+    /** Capabilities granted for Computer Backup API calls, or null when the suite is unavailable. */
+    getBackupCapabilities(): readonly PartnerCapability[] | null;
+}
+//# sourceMappingURL=account-info.d.ts.map

package/dist/partner/account-info.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-info.d.ts","sourceRoot":"","sources":["../../src/partner/account-info.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEtF;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,OAAO,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI,CAAA;IAC7C;;;;;OAKG;IACH,OAAO,IAAI,wBAAwB,GAAG,IAAI,CAAA;IAC1C,sDAAsD;IACtD,KAAK,IAAI,IAAI,CAAA;IAEb,kDAAkD;IAClD,eAAe,IAAI,YAAY,CAAA;IAC/B,6EAA6E;IAC7E,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,qFAAqF;IACrF,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,uDAAuD;IACvD,YAAY,IAAI,SAAS,CAAA;IACzB,yFAAyF;IACzF,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAC5D,iGAAiG;IACjG,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAA;CAC7D"}

package/dist/partner/account-info.d.ts

@@ -0,0 +1,43 @@
+import { AccountId, PartnerToken } from '../types/ids.js';
+import { PartnerAuthorizeResponse, PartnerCapability } from '../types/partner.js';
+/**
+ * Stores Partner API and Computer Backup authorization state between requests.
+ *
+ * Reauthorization follows the storage client's `RetryTransport.onReauth`
+ * contract: re-run `PartnerRawClient.authorizePartner` with the same Master
+ * Application Key credentials, store the fresh response with `setAuth`, then
+ * return `authorizationToken` to the retry transport.
+ *
+ * Partner authorize responses redact `authorizationToken` when passed to
+ * `JSON.stringify`, so do not persist `getAuth()` with direct JSON serialization.
+ * For trusted durable caches, serialize the output of
+ * `partnerAuthorizeResponseForPersistence(getAuth())` into encrypted or
+ * otherwise credential-grade storage, or store `authorizationToken` directly in
+ * secure storage with the rest of the authorize response metadata.
+ */
+export interface PartnerAccountInfo {
+    /** Store a fresh Partner authorization response, replacing any previous state. */
+    setAuth(auth: PartnerAuthorizeResponse): void;
+    /**
+     * Return the current Partner authorization response, or null if not authorized.
+     *
+     * The returned object remains directly reusable with `setAuth()`, but
+     * `JSON.stringify` redacts its token and is not a persistence format.
+     */
+    getAuth(): PartnerAuthorizeResponse | null;
+    /** Discard all cached Partner authorization state. */
+    clear(): void;
+    /** Current Partner/Backup authorization token. */
+    getPartnerToken(): PartnerToken;
+    /** Base URL for Partner API calls, or null when the suite is unavailable. */
+    getGroupsApiUrl(): string | null;
+    /** Base URL for Computer Backup API calls, or null when the suite is unavailable. */
+    getBackupApiUrl(): string | null;
+    /** The authorized partner administrator account ID. */
+    getAccountId(): AccountId;
+    /** Capabilities granted for Partner API calls, or null when the suite is unavailable. */
+    getGroupsCapabilities(): readonly PartnerCapability[] | null;
+    /** Capabilities granted for Computer Backup API calls, or null when the suite is unavailable. */
+    getBackupCapabilities(): readonly PartnerCapability[] | null;
+}
+//# sourceMappingURL=account-info.d.ts.map

package/dist/partner/account-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-info.d.ts","sourceRoot":"","sources":["../../src/partner/account-info.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEtF;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,OAAO,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI,CAAA;IAC7C;;;;;OAKG;IACH,OAAO,IAAI,wBAAwB,GAAG,IAAI,CAAA;IAC1C,sDAAsD;IACtD,KAAK,IAAI,IAAI,CAAA;IAEb,kDAAkD;IAClD,eAAe,IAAI,YAAY,CAAA;IAC/B,6EAA6E;IAC7E,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,qFAAqF;IACrF,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,uDAAuD;IACvD,YAAY,IAAI,SAAS,CAAA;IACzB,yFAAyF;IACzF,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAC5D,iGAAiG;IACjG,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAA;CAC7D"}

package/dist/partner/auth-clone.cjs

@@ -0,0 +1,64 @@
+const require_auth_shape = require("./auth-shape.cjs");
+//#region src/partner/auth-clone.ts
+/**
+* Returns a hook-free Partner authorize response copy.
+*
+* @param auth - Partner authorization response to clone.
+*
+* @returns A plain object preserving the live Partner token.
+*
+* @internal
+*/
+function clonePartnerAuthorizeResponse(auth) {
+	require_auth_shape.validatePartnerAuthorizeResponseShape(auth);
+	const storageApi = auth.apiInfo.storageApi;
+	const groupsApi = auth.apiInfo.groupsApi;
+	const backupApi = auth.apiInfo.backupApi;
+	return {
+		accountId: auth.accountId,
+		authorizationToken: auth.authorizationToken,
+		apiInfo: {
+			...storageApi !== void 0 ? { storageApi: {
+				...storageApi,
+				capabilities: [...storageApi.capabilities]
+			} } : {},
+			...groupsApi !== void 0 ? { groupsApi: {
+				...groupsApi,
+				capabilities: [...groupsApi.capabilities],
+				infoType: "groupsApi"
+			} } : {},
+			...backupApi !== void 0 ? { backupApi: {
+				...backupApi,
+				capabilities: [...backupApi.capabilities],
+				infoType: "backupApi"
+			} } : {}
+		},
+		...groupsApi !== void 0 ? { groupsApiUrl: groupsApi.groupsApiUrl } : {},
+		...backupApi !== void 0 ? { backupApiUrl: backupApi.backupApiUrl } : {},
+		...groupsApi !== void 0 ? { groupsCapabilities: [...groupsApi.capabilities] } : {},
+		...backupApi !== void 0 ? { backupCapabilities: [...backupApi.capabilities] } : {},
+		applicationKeyExpirationTimestamp: auth.applicationKeyExpirationTimestamp
+	};
+}
+/**
+* Returns a plain Partner authorize response copy for trusted auth-cache persistence.
+*
+* Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the
+* result can be serialized, parsed, and passed back to
+* `PartnerAccountInfo.setAuth()`.
+*
+* The returned value is raw bearer-token material. Store it only in encrypted
+* or otherwise credential-grade durable storage, and never log it.
+*
+* @param auth - Partner authorization response to persist.
+*
+* @returns A plain object with the live Partner token preserved.
+*/
+function partnerAuthorizeResponseForPersistence(auth) {
+	return clonePartnerAuthorizeResponse(auth);
+}
+//#endregion
+exports.clonePartnerAuthorizeResponse = clonePartnerAuthorizeResponse;
+exports.partnerAuthorizeResponseForPersistence = partnerAuthorizeResponseForPersistence;
+
+//# sourceMappingURL=auth-clone.cjs.map

package/dist/partner/auth-clone.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-clone.cjs","names":[],"sources":["../../src/partner/auth-clone.ts"],"sourcesContent":["import type { PartnerAuthorizeResponse } from '../types/partner.ts'\nimport { validatePartnerAuthorizeResponseShape } from './auth-shape.ts'\n\n/**\n * Returns a hook-free Partner authorize response copy.\n *\n * @param auth - Partner authorization response to clone.\n *\n * @returns A plain object preserving the live Partner token.\n *\n * @internal\n */\nexport function clonePartnerAuthorizeResponse(\n  auth: PartnerAuthorizeResponse,\n): PartnerAuthorizeResponse {\n  validatePartnerAuthorizeResponseShape(auth)\n\n  const storageApi = auth.apiInfo.storageApi\n  const groupsApi = auth.apiInfo.groupsApi\n  const backupApi = auth.apiInfo.backupApi\n\n  return {\n    accountId: auth.accountId,\n    authorizationToken: auth.authorizationToken,\n    apiInfo: {\n      ...(storageApi !== undefined\n        ? {\n            storageApi: {\n              ...storageApi,\n              capabilities: [...storageApi.capabilities],\n            },\n          }\n        : {}),\n      ...(groupsApi !== undefined\n        ? {\n            groupsApi: {\n              ...groupsApi,\n              capabilities: [...groupsApi.capabilities],\n              infoType: 'groupsApi' as const,\n            },\n          }\n        : {}),\n      ...(backupApi !== undefined\n        ? {\n            backupApi: {\n              ...backupApi,\n              capabilities: [...backupApi.capabilities],\n              infoType: 'backupApi' as const,\n            },\n          }\n        : {}),\n    },\n    ...(groupsApi !== undefined ? { groupsApiUrl: groupsApi.groupsApiUrl } : {}),\n    ...(backupApi !== undefined ? { backupApiUrl: backupApi.backupApiUrl } : {}),\n    ...(groupsApi !== undefined ? { groupsCapabilities: [...groupsApi.capabilities] } : {}),\n    ...(backupApi !== undefined ? { backupCapabilities: [...backupApi.capabilities] } : {}),\n    applicationKeyExpirationTimestamp: auth.applicationKeyExpirationTimestamp,\n  }\n}\n\n/**\n * Returns a plain Partner authorize response copy for trusted auth-cache persistence.\n *\n * Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the\n * result can be serialized, parsed, and passed back to\n * `PartnerAccountInfo.setAuth()`.\n *\n * The returned value is raw bearer-token material. Store it only in encrypted\n * or otherwise credential-grade durable storage, and never log it.\n *\n * @param auth - Partner authorization response to persist.\n *\n * @returns A plain object with the live Partner token preserved.\n */\nexport function partnerAuthorizeResponseForPersistence(\n  auth: PartnerAuthorizeResponse,\n): PartnerAuthorizeResponse {\n  return clonePartnerAuthorizeResponse(auth)\n}\n"],"mappings":";;;;;;;;;;;AAYA,SAAgB,8BACd,MAC0B;CAC1B,mBAAA,sCAAsC,IAAI;CAE1C,MAAM,aAAa,KAAK,QAAQ;CAChC,MAAM,YAAY,KAAK,QAAQ;CAC/B,MAAM,YAAY,KAAK,QAAQ;CAE/B,OAAO;EACL,WAAW,KAAK;EAChB,oBAAoB,KAAK;EACzB,SAAS;GACP,GAAI,eAAe,KAAA,IACf,EACE,YAAY;IACV,GAAG;IACH,cAAc,CAAC,GAAG,WAAW,YAAY;GAC3C,EACF,IACA,CAAC;GACL,GAAI,cAAc,KAAA,IACd,EACE,WAAW;IACT,GAAG;IACH,cAAc,CAAC,GAAG,UAAU,YAAY;IACxC,UAAU;GACZ,EACF,IACA,CAAC;GACL,GAAI,cAAc,KAAA,IACd,EACE,WAAW;IACT,GAAG;IACH,cAAc,CAAC,GAAG,UAAU,YAAY;IACxC,UAAU;GACZ,EACF,IACA,CAAC;EACP;EACA,GAAI,cAAc,KAAA,IAAY,EAAE,cAAc,UAAU,aAAa,IAAI,CAAC;EAC1E,GAAI,cAAc,KAAA,IAAY,EAAE,cAAc,UAAU,aAAa,IAAI,CAAC;EAC1E,GAAI,cAAc,KAAA,IAAY,EAAE,oBAAoB,CAAC,GAAG,UAAU,YAAY,EAAE,IAAI,CAAC;EACrF,GAAI,cAAc,KAAA,IAAY,EAAE,oBAAoB,CAAC,GAAG,UAAU,YAAY,EAAE,IAAI,CAAC;EACrF,mCAAmC,KAAK;CAC1C;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,uCACd,MAC0B;CAC1B,OAAO,8BAA8B,IAAI;AAC3C"}

package/dist/partner/auth-clone.d.cts

@@ -0,0 +1,27 @@
+import { PartnerAuthorizeResponse } from '../types/partner.js';
+/**
+ * Returns a hook-free Partner authorize response copy.
+ *
+ * @param auth - Partner authorization response to clone.
+ *
+ * @returns A plain object preserving the live Partner token.
+ *
+ * @internal
+ */
+export declare function clonePartnerAuthorizeResponse(auth: PartnerAuthorizeResponse): PartnerAuthorizeResponse;
+/**
+ * Returns a plain Partner authorize response copy for trusted auth-cache persistence.
+ *
+ * Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the
+ * result can be serialized, parsed, and passed back to
+ * `PartnerAccountInfo.setAuth()`.
+ *
+ * The returned value is raw bearer-token material. Store it only in encrypted
+ * or otherwise credential-grade durable storage, and never log it.
+ *
+ * @param auth - Partner authorization response to persist.
+ *
+ * @returns A plain object with the live Partner token preserved.
+ */
+export declare function partnerAuthorizeResponseForPersistence(auth: PartnerAuthorizeResponse): PartnerAuthorizeResponse;
+//# sourceMappingURL=auth-clone.d.ts.map

package/dist/partner/auth-clone.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-clone.d.ts","sourceRoot":"","sources":["../../src/partner/auth-clone.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAGnE;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,wBAAwB,GAC7B,wBAAwB,CA4C1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,wBAAwB,GAC7B,wBAAwB,CAE1B"}

package/dist/partner/auth-clone.d.ts

@@ -0,0 +1,27 @@
+import { PartnerAuthorizeResponse } from '../types/partner.js';
+/**
+ * Returns a hook-free Partner authorize response copy.
+ *
+ * @param auth - Partner authorization response to clone.
+ *
+ * @returns A plain object preserving the live Partner token.
+ *
+ * @internal
+ */
+export declare function clonePartnerAuthorizeResponse(auth: PartnerAuthorizeResponse): PartnerAuthorizeResponse;
+/**
+ * Returns a plain Partner authorize response copy for trusted auth-cache persistence.
+ *
+ * Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the
+ * result can be serialized, parsed, and passed back to
+ * `PartnerAccountInfo.setAuth()`.
+ *
+ * The returned value is raw bearer-token material. Store it only in encrypted
+ * or otherwise credential-grade durable storage, and never log it.
+ *
+ * @param auth - Partner authorization response to persist.
+ *
+ * @returns A plain object with the live Partner token preserved.
+ */
+export declare function partnerAuthorizeResponseForPersistence(auth: PartnerAuthorizeResponse): PartnerAuthorizeResponse;
+//# sourceMappingURL=auth-clone.d.ts.map

package/dist/partner/auth-clone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-clone.d.ts","sourceRoot":"","sources":["../../src/partner/auth-clone.js"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAGnE;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,wBAAwB,GAC7B,wBAAwB,CA4C1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,wBAAwB,GAC7B,wBAAwB,CAE1B"}

package/dist/partner/auth-clone.js

@@ -0,0 +1,63 @@
+import { validatePartnerAuthorizeResponseShape } from "./auth-shape.js";
+//#region src/partner/auth-clone.ts
+/**
+* Returns a hook-free Partner authorize response copy.
+*
+* @param auth - Partner authorization response to clone.
+*
+* @returns A plain object preserving the live Partner token.
+*
+* @internal
+*/
+function clonePartnerAuthorizeResponse(auth) {
+	validatePartnerAuthorizeResponseShape(auth);
+	const storageApi = auth.apiInfo.storageApi;
+	const groupsApi = auth.apiInfo.groupsApi;
+	const backupApi = auth.apiInfo.backupApi;
+	return {
+		accountId: auth.accountId,
+		authorizationToken: auth.authorizationToken,
+		apiInfo: {
+			...storageApi !== void 0 ? { storageApi: {
+				...storageApi,
+				capabilities: [...storageApi.capabilities]
+			} } : {},
+			...groupsApi !== void 0 ? { groupsApi: {
+				...groupsApi,
+				capabilities: [...groupsApi.capabilities],
+				infoType: "groupsApi"
+			} } : {},
+			...backupApi !== void 0 ? { backupApi: {
+				...backupApi,
+				capabilities: [...backupApi.capabilities],
+				infoType: "backupApi"
+			} } : {}
+		},
+		...groupsApi !== void 0 ? { groupsApiUrl: groupsApi.groupsApiUrl } : {},
+		...backupApi !== void 0 ? { backupApiUrl: backupApi.backupApiUrl } : {},
+		...groupsApi !== void 0 ? { groupsCapabilities: [...groupsApi.capabilities] } : {},
+		...backupApi !== void 0 ? { backupCapabilities: [...backupApi.capabilities] } : {},
+		applicationKeyExpirationTimestamp: auth.applicationKeyExpirationTimestamp
+	};
+}
+/**
+* Returns a plain Partner authorize response copy for trusted auth-cache persistence.
+*
+* Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the
+* result can be serialized, parsed, and passed back to
+* `PartnerAccountInfo.setAuth()`.
+*
+* The returned value is raw bearer-token material. Store it only in encrypted
+* or otherwise credential-grade durable storage, and never log it.
+*
+* @param auth - Partner authorization response to persist.
+*
+* @returns A plain object with the live Partner token preserved.
+*/
+function partnerAuthorizeResponseForPersistence(auth) {
+	return clonePartnerAuthorizeResponse(auth);
+}
+//#endregion
+export { clonePartnerAuthorizeResponse, partnerAuthorizeResponseForPersistence };
+
+//# sourceMappingURL=auth-clone.js.map

package/dist/partner/auth-clone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-clone.js","names":[],"sources":["../../src/partner/auth-clone.ts"],"sourcesContent":["import type { PartnerAuthorizeResponse } from '../types/partner.ts'\nimport { validatePartnerAuthorizeResponseShape } from './auth-shape.ts'\n\n/**\n * Returns a hook-free Partner authorize response copy.\n *\n * @param auth - Partner authorization response to clone.\n *\n * @returns A plain object preserving the live Partner token.\n *\n * @internal\n */\nexport function clonePartnerAuthorizeResponse(\n  auth: PartnerAuthorizeResponse,\n): PartnerAuthorizeResponse {\n  validatePartnerAuthorizeResponseShape(auth)\n\n  const storageApi = auth.apiInfo.storageApi\n  const groupsApi = auth.apiInfo.groupsApi\n  const backupApi = auth.apiInfo.backupApi\n\n  return {\n    accountId: auth.accountId,\n    authorizationToken: auth.authorizationToken,\n    apiInfo: {\n      ...(storageApi !== undefined\n        ? {\n            storageApi: {\n              ...storageApi,\n              capabilities: [...storageApi.capabilities],\n            },\n          }\n        : {}),\n      ...(groupsApi !== undefined\n        ? {\n            groupsApi: {\n              ...groupsApi,\n              capabilities: [...groupsApi.capabilities],\n              infoType: 'groupsApi' as const,\n            },\n          }\n        : {}),\n      ...(backupApi !== undefined\n        ? {\n            backupApi: {\n              ...backupApi,\n              capabilities: [...backupApi.capabilities],\n              infoType: 'backupApi' as const,\n            },\n          }\n        : {}),\n    },\n    ...(groupsApi !== undefined ? { groupsApiUrl: groupsApi.groupsApiUrl } : {}),\n    ...(backupApi !== undefined ? { backupApiUrl: backupApi.backupApiUrl } : {}),\n    ...(groupsApi !== undefined ? { groupsCapabilities: [...groupsApi.capabilities] } : {}),\n    ...(backupApi !== undefined ? { backupCapabilities: [...backupApi.capabilities] } : {}),\n    applicationKeyExpirationTimestamp: auth.applicationKeyExpirationTimestamp,\n  }\n}\n\n/**\n * Returns a plain Partner authorize response copy for trusted auth-cache persistence.\n *\n * Unlike `JSON.stringify(auth)`, this preserves `authorizationToken` so the\n * result can be serialized, parsed, and passed back to\n * `PartnerAccountInfo.setAuth()`.\n *\n * The returned value is raw bearer-token material. Store it only in encrypted\n * or otherwise credential-grade durable storage, and never log it.\n *\n * @param auth - Partner authorization response to persist.\n *\n * @returns A plain object with the live Partner token preserved.\n */\nexport function partnerAuthorizeResponseForPersistence(\n  auth: PartnerAuthorizeResponse,\n): PartnerAuthorizeResponse {\n  return clonePartnerAuthorizeResponse(auth)\n}\n"],"mappings":";;;;;;;;;;;AAYA,SAAgB,8BACd,MAC0B;CAC1B,sCAAsC,IAAI;CAE1C,MAAM,aAAa,KAAK,QAAQ;CAChC,MAAM,YAAY,KAAK,QAAQ;CAC/B,MAAM,YAAY,KAAK,QAAQ;CAE/B,OAAO;EACL,WAAW,KAAK;EAChB,oBAAoB,KAAK;EACzB,SAAS;GACP,GAAI,eAAe,KAAA,IACf,EACE,YAAY;IACV,GAAG;IACH,cAAc,CAAC,GAAG,WAAW,YAAY;GAC3C,EACF,IACA,CAAC;GACL,GAAI,cAAc,KAAA,IACd,EACE,WAAW;IACT,GAAG;IACH,cAAc,CAAC,GAAG,UAAU,YAAY;IACxC,UAAU;GACZ,EACF,IACA,CAAC;GACL,GAAI,cAAc,KAAA,IACd,EACE,WAAW;IACT,GAAG;IACH,cAAc,CAAC,GAAG,UAAU,YAAY;IACxC,UAAU;GACZ,EACF,IACA,CAAC;EACP;EACA,GAAI,cAAc,KAAA,IAAY,EAAE,cAAc,UAAU,aAAa,IAAI,CAAC;EAC1E,GAAI,cAAc,KAAA,IAAY,EAAE,cAAc,UAAU,aAAa,IAAI,CAAC;EAC1E,GAAI,cAAc,KAAA,IAAY,EAAE,oBAAoB,CAAC,GAAG,UAAU,YAAY,EAAE,IAAI,CAAC;EACrF,GAAI,cAAc,KAAA,IAAY,EAAE,oBAAoB,CAAC,GAAG,UAAU,YAAY,EAAE,IAAI,CAAC;EACrF,mCAAmC,KAAK;CAC1C;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,uCACd,MAC0B;CAC1B,OAAO,8BAA8B,IAAI;AAC3C"}